General
- Target 2026-07-22_70b530b36bda4e1a112a9f3603fdebe2_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 39.9MB
- Sample260722-x9d4vabe24
- SHA256 5e4da811bfdf0a097e1d9859a2d70b5c254c968ea5eaa8be142edf6b75aa4b3a
- MD5 70b530b36bda4e1a112a9f3603fdebe2
- SHA1 4cfc0ac26bd173997f26d881b1a5eec54afdf97d
- SHA512 1a5697d8714da6ccb587f5ec5883f2459a697cf6e48ce93cae5e81764d93cf7a14c999e78f82916bb501990915d35ae03c9188b79bea67adf26e132ae7adf475
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfJ:fMguj8Q4VfvLqFTrYw27JWuQ4c
- TLSH T11D979C0773E600D5E5B7D2388AA65507D773B8638331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_70b530b36bda4e1a112a9f3603fdebe2_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_70b530b36bda4e1a112a9f3603fdebe2_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 39.9MB
- SHA256 5e4da811bfdf0a097e1d9859a2d70b5c254c968ea5eaa8be142edf6b75aa4b3a
- MD5 70b530b36bda4e1a112a9f3603fdebe2
- SHA1 4cfc0ac26bd173997f26d881b1a5eec54afdf97d
- SHA512 1a5697d8714da6ccb587f5ec5883f2459a697cf6e48ce93cae5e81764d93cf7a14c999e78f82916bb501990915d35ae03c9188b79bea67adf26e132ae7adf475
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfJ:fMguj8Q4VfvLqFTrYw27JWuQ4c
- TLSH T11D979C0773E600D5E5B7D2388AA65507D773B8638331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates processes with tasklist