General
- Target 2026-07-22_ac9f8bf8b9757964c1c541798d5dbd40_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 39.9MB
- Sample260722-x12tjsbc55
- SHA256 e70d0e3fcbbe106a2834d342c8f57f98d14aa4008f3fad36ca4574ccf06f16c4
- MD5 ac9f8bf8b9757964c1c541798d5dbd40
- SHA1 47bae5c36bc4bf83f133aa39afc3d3c43ea8ab02
- SHA512 bb3dc44fa45faa3e36c20c0df62bc16ebd7f3e200d6c916e70b591618d4e7c980b0c458986f405f65630eac8c2bdb0e5c70e5ae0e57d378bdd964a26353759bf
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfs:fMguj8Q4VfvtqFTrYCeW2AJWufJWuE
- TLSH T1F9979C0773E600D5E5B7D2388AA65507D773B8638331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_ac9f8bf8b9757964c1c541798d5dbd40_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_ac9f8bf8b9757964c1c541798d5dbd40_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 39.9MB
- SHA256 e70d0e3fcbbe106a2834d342c8f57f98d14aa4008f3fad36ca4574ccf06f16c4
- MD5 ac9f8bf8b9757964c1c541798d5dbd40
- SHA1 47bae5c36bc4bf83f133aa39afc3d3c43ea8ab02
- SHA512 bb3dc44fa45faa3e36c20c0df62bc16ebd7f3e200d6c916e70b591618d4e7c980b0c458986f405f65630eac8c2bdb0e5c70e5ae0e57d378bdd964a26353759bf
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfs:fMguj8Q4VfvtqFTrYCeW2AJWufJWuE
- TLSH T1F9979C0773E600D5E5B7D2388AA65507D773B8638331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates processes with tasklist