General
- Target 2026-07-21_5c27570214b36d3399fdc1f0f70b77aa_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 33.8MB
- Sample260721-bt3llsc181
- SHA256 1cba111e05237efc845e951a67cad5e8372f7aa62c170485e790192eea91a7d1
- MD5 5c27570214b36d3399fdc1f0f70b77aa
- SHA1 3d8db4dd30b06d2f03f58f15dd32894702e77832
- SHA512 9e5f6f6f9eb7d060529a2c07a1d34702299a34e920272a02e52a5347966dec7f912467c28fc5c1e8157c8bb96b4ab506937052079f97aad562b402fdcdc8b690
- SSDEEP 393216:dQgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mg2+6l+ZArYsGaMqNn:d3on1HvSzxAMN20ZArY/dicZ7K
- TLSH T1F4779D03B2A501D5E8B7D1388AA74203D772B8674731CACF325D02561FBBAE09A7F765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_5c27570214b36d3399fdc1f0f70b77aa_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_5c27570214b36d3399fdc1f0f70b77aa_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_5c27570214b36d3399fdc1f0f70b77aa_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 33.8MB
- SHA256 1cba111e05237efc845e951a67cad5e8372f7aa62c170485e790192eea91a7d1
- MD5 5c27570214b36d3399fdc1f0f70b77aa
- SHA1 3d8db4dd30b06d2f03f58f15dd32894702e77832
- SHA512 9e5f6f6f9eb7d060529a2c07a1d34702299a34e920272a02e52a5347966dec7f912467c28fc5c1e8157c8bb96b4ab506937052079f97aad562b402fdcdc8b690
- SSDEEP 393216:dQgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mg2+6l+ZArYsGaMqNn:d3on1HvSzxAMN20ZArY/dicZ7K
- TLSH T1F4779D03B2A501D5E8B7D1388AA74203D772B8674731CACF325D02561FBBAE09A7F765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist
-
Executes a VBScript file via the Windows Script Host.