General
- Target 2026-07-22_9844a2848049f3a2908a009c37376b6b_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 42.6MB
- Sample260722-vyvw4saa23
- SHA256 e817b32f226327891e148f0bb956825d1b2d933a6fa1f447344edb0e761a2276
- MD5 9844a2848049f3a2908a009c37376b6b
- SHA1 d30ed7e2f0a121cdcfec82353809732342957424
- SHA512 c2e8d4982a9018f9bfe8bcc09ec094d261565bd8604994cd37779ff559b1d5ecc557a58b4a5cde0eab82be1f9bf59f3d25da388ced3bd8d38b7fc2d914d43150
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf2:fMguj8Q4VfvpqFTrYv
- TLSH T153A79D2773E600A5E5B3D1388AA74503DB73B4635331CADF329D06551FABAE09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_9844a2848049f3a2908a009c37376b6b_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_9844a2848049f3a2908a009c37376b6b_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 42.6MB
- SHA256 e817b32f226327891e148f0bb956825d1b2d933a6fa1f447344edb0e761a2276
- MD5 9844a2848049f3a2908a009c37376b6b
- SHA1 d30ed7e2f0a121cdcfec82353809732342957424
- SHA512 c2e8d4982a9018f9bfe8bcc09ec094d261565bd8604994cd37779ff559b1d5ecc557a58b4a5cde0eab82be1f9bf59f3d25da388ced3bd8d38b7fc2d914d43150
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf2:fMguj8Q4VfvpqFTrYv
- TLSH T153A79D2773E600A5E5B3D1388AA74503DB73B4635331CADF329D06551FABAE09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates processes with tasklist