2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar
Size 36.9MB
Sample260723-gnmk4aen3x
SHA256 97b1a7662c988707f96c05b55b005dd7db3d06a610e803d4c63ba4ef083523f2
MD5 5a87621e949c16b795e915624db2eabf
SHA1 9f99693536a7aacfd31109327c5694b460c527c5
SHA512 e17ea3fc71486e97ff6d39b8a0ecf7ee9113d15794449cb8b17315ee437353febc73876d27716a3077c37979123bc787bab2585932c462419780fecb65831aca
SSDEEP 393216:6G8RPGaZ4AwP/9eMUXGa7e6d24VQaxH1pfuCOGCZP7upAyx:ejvo4K4H1luCOG8CWyx
TLSH
T1DA874992BA960ADCE49FE2799EE942B1FE333446433112C746D845451E8F7F08E3BB91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar

File Explorer

2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar

.exe 36.9MB

2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar

IMPHASH d8c925073e7ccffe8c4463753dd92316
SHA256 97b1a7662c988707f96c05b55b005dd7db3d06a610e803d4c63ba4ef083523f2
MD5 5a87621e949c16b795e915624db2eabf
SHA1 9f99693536a7aacfd31109327c5694b460c527c5
SHA512 e17ea3fc71486e97ff6d39b8a0ecf7ee9113d15794449cb8b17315ee437353febc73876d27716a3077c37979123bc787bab2585932c462419780fecb65831aca
SSDEEP 393216:6G8RPGaZ4AwP/9eMUXGa7e6d24VQaxH1pfuCOGCZP7upAyx:ejvo4K4H1luCOG8CWyx
TLSH
T1DA874992BA960ADCE49FE2799EE942B1FE333446433112C746D845451E8F7F08E3BB91
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13491212

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

advapi32

RegCloseKey RegEnumKeyExA RegOpenKeyExA CryptGenRandom GetUserNameW OpenProcessToken CryptReleaseContext CryptAcquireContextA ConvertStringSidToSidW RegOpenKeyExW RegQueryInfoKeyA RegQueryValueExA RegQueryValueExW SetThreadToken OpenThreadToken AccessCheck AddAccessAllowedAceEx AddAccessDeniedAceEx AdjustTokenPrivileges DuplicateTokenEx GetAce GetAclInformation GetFileSecurityW GetLengthSid GetSecurityDescriptorDacl GetSecurityDescriptorOwner GetTokenInformation InitializeAcl InitializeSecurityDescriptor MapGenericMask SetFileSecurityW SetSecurityDescriptorDacl SetSecurityDescriptorOwner LookupAccountSidW LookupAccountNameW LookupPrivilegeValueW ConvertSidToStringSidW

ws2_32

getaddrinfo WSAEventSelect WSACreateEvent WSACloseEvent gethostname htons htonl getsockopt bind WSAIoctl WSAGetLastError WSASetLastError socket setsockopt sendto freeaddrinfo recvfrom getsockname ioctlsocket connect closesocket ntohs ntohl accept listen send shutdown recv WSARecv WSASend getnameinfo getpeername WSAStartup select __WSAFDIsSet

userenv

GetUserProfileDirectoryW

mswsock

TransmitFile

kernel32

UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WriteFile GetTimeZoneInformation GetDynamicTimeZoneInformation MultiByteToWideChar SetHandleInformation LocalFree FormatMessageA GetOverlappedResult GlobalFree VerSetConditionMask VerifyVersionInfoW SetFilePointerEx MapViewOfFile CreateFileMappingA GetDiskFreeSpaceW GetFileSizeEx LockFileEx ReadFile SetFileInformationByHandle UnlockFileEx ReOpenFile GetFileInformationByHandle CreateDirectoryW DeleteFileW FindClose FindFirstFileW FindNextFileW GetDiskFreeSpaceExW GetDriveTypeW GetFileAttributesW GetFileAttributesExW GetFinalPathNameByHandleW GetFullPathNameW GetLogicalDrives GetVolumeInformationW GetVolumePathNameW RemoveDirectoryW SetEndOfFile SetFileAttributesW SetFileTime FindFirstStreamW FindNextStreamW CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus DeviceIoControl CancelIo CreateEventW LocalAlloc FormatMessageW CopyFileExW MoveFileExW CreateHardLinkW ReadDirectoryChangesW CreateSymbolicLinkW GetFileTime SetLastError GetModuleHandleExW SwitchToThread GetEnvironmentStringsW FreeEnvironmentStringsA FreeEnvironmentStringsW WaitForMultipleObjects GetProcessTimes GetCurrentProcessId TerminateProcess GetExitCodeProcess OpenProcess QueryFullProcessImageNameW CreateToolhelp32Snapshot Process32First Process32Next GetHandleInformation CreatePipe CreateProcessW GetProcessId WideCharToMultiByte GetConsoleWindow GetLocaleInfoA GetGeoInfoA GetUserGeoID GetUserDefaultLCID FindFirstFileA IsDBCSLeadByte GetFileType SetFilePointer PeekNamedPipe GetNumberOfConsoleInputEvents PeekConsoleInputA CreateFileA GetTempPathA ReleaseSemaphore GetSystemTimeAsFileTime GetProcessAffinityMask RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetModuleHandleW AddVectoredContinueHandler CloseHandle CreateEventA CreateFileMappingW CreateFileW DuplicateHandle EnterCriticalSection FlushFileBuffers GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetStdHandle GetSystemDirectoryW SleepConditionVariableCS Sleep GetSystemInfo SetEvent ResumeThread ResetEvent QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryA LeaveCriticalSection GetTempPathW GetVersionExA GetWindowsDirectoryW GlobalMemoryStatusEx InitializeConditionVariable InitializeCriticalSection GetEnvironmentStrings

vcruntime140

strchr _CxxThrowException wcsrchr __C_specific_handler wcschr memset memmove memcpy __current_exception __current_exception_context __std_exception_copy wcsstr __std_exception_destroy memcmp

api-ms-win-crt-runtime-l1-1-0

_exit abort strerror raise _seh_filter_exe _set_app_type signal _beginthreadex terminate strerror_s _errno _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _register_onexit_function _initialize_onexit_table _initterm _crt_atexit exit _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _initterm_e

api-ms-win-crt-environment-l1-1-0

_wgetenv _wgetdcwd _wgetcwd

api-ms-win-crt-heap-l1-1-0

_set_new_mode realloc _callnewh malloc free calloc

api-ms-win-crt-string-l1-1-0

strncpy_s strncpy strcat wcstok_s _wcsdup wcscmp wcsncmp wcscpy iswctype wcscat _strdup wcsncat wcslen _wcsupr strlen strcmp towupper isdigit isalpha toupper islower strcpy isupper

api-ms-win-crt-convert-l1-1-0

wcstombs strtoull wcstombs_s mbstowcs_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf fputs __stdio_common_vsnprintf_s fopen __p__commode _set_fmode fgets fclose __stdio_common_vswprintf __stdio_common_vswscanf __stdio_common_vfprintf _get_osfhandle __acrt_iob_func

api-ms-win-crt-filesystem-l1-1-0

_wrename _fullpath _wfullpath

api-ms-win-crt-utility-l1-1-0

labs

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

winhttp

WinHttpOpen WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser

secur32

DeleteSecurityContext CompleteAuthToken InitializeSecurityContextA FreeCredentialsHandle AcquireCredentialsHandleA

iphlpapi

GetAdaptersInfo NotifyAddrChange GetAdaptersAddresses IcmpCreateFile IcmpCloseHandle IcmpSendEcho IcmpSendEcho2Ex Icmp6CreateFile Icmp6SendEcho2 GetIfTable GetIpAddrTable GetFriendlyIfIndex

Canonicalize GetStringPlatformChars InitializeEncoding IsolateEnterStub__CEntryPointNativeFunctions__attachThread__90932bcc20ecbcf858aacee06591a5d6accfc6c5__1d183c6f5747eae8664b2040486512f94f76e80a IsolateEnterStub__CEntryPointNativeFunctions__createIsolate__4da00afe966ec86044a696c1c6cc5edee54f5947__fb52e230acd1e8278801cbbab0a45b63420d9206 IsolateEnterStub__CEntryPointNativeFunctions__detachAllThreadsAndTearDownIsolate__8ad059985878d3e833133ac81d31e6a5e663588c__0d033185a2ea569ff357a8e6934b8ca0f839fd2d IsolateEnterStub__CEntryPointNativeFunctions__detachThread__69c773a2192ecb2e69e075ae79e8981eca9341c1__c685f50aa5dc4b82f2c79a10bffa488cd558e2fa IsolateEnterStub__CEntryPointNativeFunctions__getCurrentThread__bc628616827b1c7a7e7fb487755d59e6aa965543__57d5ce0e01f37a287472c8d15afe2cdc157f5509 IsolateEnterStub__CEntryPointNativeFunctions__getIsolate__f4dc764d5e397da0c8702a7275b47a8472e550bf__04b2f6f0c083a3b5b0a994740f3f7115171ef12e IsolateEnterStub__CEntryPointNativeFunctions__tearDownIsolate__e7eeccdf82350fb403383062c77028f83fcd185b__e6fc8f8e2ce918658a1f234c445c2b8917a757ef IsolateEnterStub__JNIInvocationInterface_0024Exports__JNI__CreateJavaVM__5039eb5aa99cf9f72730ab2d0e29ae6c12b19e97__6f26f759c4dc3632fadc91c510a779de59b468b6 IsolateEnterStub__JNIInvocationInterface_0024Exports__JNI__GetCreatedJavaVMs__fabdcd9e9fd8550f0f1221268cfc2a219bdb7163__97d7bdacedb6148df54e2712802128d4da7335c0 IsolateEnterStub__JNIInvocationInterface_0024Exports__JNI__GetDefaultJavaVMInitArgs__3826dec25e2ca0c5d372c66d418722771fb21f83__a6af4db3692ab963e1eb0ca0c68be8363379e799 IsolateEnterStub__JavaMainWrapper__run__3148eece06270530b6e0d4d60311411342c82698__6639c63c0a0b7601e24c7fab81d8f5dd272de493 IsolateEnterStub__VmLocatorSymbol__vmLocatorSymbol__08573e35796b561e5eb64c338e890eaaca9db6ca__b221d1e506d93db269f08ef3b5e83204e91b0e7b IsolateEnterStub__WindowsSubstrateSegfaultHandler__handler__132f41f47f14683ea5a14f0551b6f51432bd7196__592b69fcaec639f8757bc3d3e798be1c46f59f22 JNI_CreateJavaVM JNI_GetCreatedJavaVMs JNI_GetDefaultJavaVMInitArgs JNI_OnLoad_java JNI_OnLoad_net JNI_OnLoad_nio JNI_OnLoad_sunec JNI_OnLoad_zip JNU_CallMethodByName JNU_CallMethodByNameV JNU_CallStaticMethodByName JNU_ClassClass JNU_ClassObject JNU_ClassString JNU_ClassThrowable JNU_CopyObjectArray JNU_Equals JNU_GetEnv JNU_GetFieldByName JNU_GetStaticFieldByName JNU_GetStringPlatformChars JNU_IsInstanceOfByName JNU_MonitorWait JNU_NewObjectByName JNU_NewStringPlatform JNU_Notify JNU_NotifyAll JNU_PrintClass JNU_PrintString JNU_ReleaseStringPlatformChars JNU_SetFieldByName JNU_SetStaticFieldByName JNU_ThrowArrayIndexOutOfBoundsException JNU_ThrowByName JNU_ThrowByNameWithLastError JNU_ThrowByNameWithMessageAndLastError JNU_ThrowClassNotFoundException JNU_ThrowIOException JNU_ThrowIOExceptionWithLastError JNU_ThrowIllegalAccessError JNU_ThrowIllegalAccessException JNU_ThrowIllegalArgumentException JNU_ThrowInstantiationException JNU_ThrowInternalError JNU_ThrowNoSuchFieldError JNU_ThrowNoSuchFieldException JNU_ThrowNoSuchMethodError JNU_ThrowNoSuchMethodException JNU_ThrowNullPointerException JNU_ThrowNumberFormatException JNU_ThrowOutOfMemoryError JNU_ThrowStringIndexOutOfBoundsException JNU_ToString JVM_ActiveProcessorCount JVM_AddModuleExports JVM_AddModuleExportsToAll JVM_AddModuleExportsToAllUnnamed JVM_AddReadsModule JVM_AreNestMates JVM_ArrayCopy JVM_AssertionStatusDirectives JVM_BeforeHalt JVM_CallStackWalk JVM_Clone JVM_ConstantPoolGetClassAt JVM_ConstantPoolGetClassAtIfLoaded JVM_ConstantPoolGetClassRefIndexAt JVM_ConstantPoolGetDoubleAt JVM_ConstantPoolGetFieldAt JVM_ConstantPoolGetFieldAtIfLoaded JVM_ConstantPoolGetFloatAt JVM_ConstantPoolGetIntAt JVM_ConstantPoolGetLongAt JVM_ConstantPoolGetMemberRefInfoAt JVM_ConstantPoolGetMethodAt JVM_ConstantPoolGetMethodAtIfLoaded JVM_ConstantPoolGetNameAndTypeRefIndexAt JVM_ConstantPoolGetNameAndTypeRefInfoAt JVM_ConstantPoolGetSize JVM_ConstantPoolGetStringAt JVM_ConstantPoolGetTagAt JVM_ConstantPoolGetUTF8At JVM_CountStackFrames JVM_CurrentThread JVM_CurrentTimeMillis JVM_DefineClassWithSource JVM_DefineModule JVM_DesiredAssertionStatus JVM_DoPrivileged JVM_DumpThreads JVM_FillInStackTrace JVM_FindClassFromBootLoader JVM_FindClassFromCaller JVM_FindClassFromClass JVM_FindLibraryEntry JVM_FindLoadedClass JVM_FindPrimitiveClass JVM_FindSignal JVM_FreeMemory JVM_GC JVM_GetAllThreads JVM_GetAndClearReferencePendingList JVM_GetArrayElement JVM_GetArrayLength JVM_GetCPClassNameUTF JVM_GetCPFieldClassNameUTF JVM_GetCPFieldModifiers JVM_GetCPFieldSignatureUTF JVM_GetCPMethodClassNameUTF JVM_GetCPMethodModifiers JVM_GetCPMethodNameUTF JVM_GetCPMethodSignatureUTF JVM_GetCallerClass JVM_GetClassAccessFlags JVM_GetClassAnnotations JVM_GetClassCPEntriesCount JVM_GetClassCPTypes JVM_GetClassConstantPool JVM_GetClassContext JVM_GetClassDeclaredConstructors JVM_GetClassDeclaredFields JVM_GetClassDeclaredMethods JVM_GetClassFieldsCount JVM_GetClassInterfaces JVM_GetClassMethodsCount JVM_GetClassModifiers JVM_GetClassNameUTF JVM_GetClassSignature JVM_GetClassSigners JVM_GetClassTypeAnnotations JVM_GetDeclaredClasses JVM_GetDeclaringClass JVM_GetEnclosingMethodInfo JVM_GetFieldIxModifiers JVM_GetFieldTypeAnnotations JVM_GetInheritedAccessControlContext JVM_GetInterfaceVersion JVM_GetLastErrorString JVM_GetManagement JVM_GetMethodIxArgsSize JVM_GetMethodIxByteCode JVM_GetMethodIxByteCodeLength JVM_GetMethodIxExceptionIndexes JVM_GetMethodIxExceptionTableEntry JVM_GetMethodIxExceptionTableLength JVM_GetMethodIxExceptionsCount JVM_GetMethodIxLocalsCount JVM_GetMethodIxMaxStack JVM_GetMethodIxModifiers JVM_GetMethodIxNameUTF JVM_GetMethodIxSignatureUTF JVM_GetMethodParameters JVM_GetMethodTypeAnnotations JVM_GetNanoTimeAdjustment JVM_GetNestHost JVM_GetNestMembers JVM_GetPrimitiveArrayElement JVM_GetProtectionDomain JVM_GetSimpleBinaryName JVM_GetStackAccessControlContext JVM_GetSystemPackage JVM_GetSystemPackages JVM_GetTemporaryDirectory JVM_GetThreadInterruptEvent JVM_GetVmArguments JVM_Halt JVM_HasReferencePendingList JVM_HoldsLock JVM_IHashCode JVM_InitAgentProperties JVM_InitClassName JVM_InitProperties JVM_InitStackTraceElement JVM_InitStackTraceElementArray JVM_InitializeFromArchive JVM_InitializeSocketLibrary JVM_InternString JVM_Interrupt JVM_InvokeMethod JVM_IsArrayClass JVM_IsConstructorIx JVM_IsInterface JVM_IsInterrupted JVM_IsPrimitiveClass JVM_IsSameClassPackage JVM_IsSupportedJNIVersion JVM_IsThreadAlive JVM_IsVMGeneratedMethodIx JVM_LatestUserDefinedLoader JVM_LoadLibrary JVM_MaxMemory JVM_MaxObjectInspectionAge JVM_MonitorNotify JVM_MonitorNotifyAll JVM_MonitorWait JVM_MoreStackWalk JVM_NanoTime JVM_NativePath JVM_NewArray JVM_NewInstanceFromConstructor JVM_NewMultiArray JVM_RaiseSignal JVM_RawMonitorCreate JVM_RawMonitorDestroy JVM_RawMonitorEnter JVM_RawMonitorExit JVM_RegisterSignal JVM_ReleaseUTF JVM_ResumeThread JVM_SetArrayElement JVM_SetBootLoaderUnnamedModule JVM_SetClassSigners JVM_SetNativeThreadName JVM_SetPrimitiveArrayElement JVM_SetThreadPriority JVM_Sleep JVM_StartThread JVM_StopThread JVM_SupportsCX8 JVM_SuspendThread JVM_TotalMemory JVM_UnloadLibrary JVM_WaitForReferencePendingList JVM_Yield Java_java_io_FileCleanable_cleanupClose0 Java_java_io_FileDescriptor_close0 Java_java_io_FileDescriptor_getAppend Java_java_io_FileDescriptor_getHandle Java_java_io_FileDescriptor_initIDs Java_java_io_FileDescriptor_sync Java_java_io_FileInputStream_available0 Java_java_io_FileInputStream_initIDs Java_java_io_FileInputStream_open0 Java_java_io_FileInputStream_read0 Java_java_io_FileInputStream_readBytes Java_java_io_FileInputStream_skip0 Java_java_io_FileOutputStream_initIDs Java_java_io_FileOutputStream_open0 Java_java_io_FileOutputStream_write Java_java_io_FileOutputStream_writeBytes Java_java_io_ObjectInputStream_bytesToDoubles Java_java_io_ObjectInputStream_bytesToFloats Java_java_io_RandomAccessFile_getFilePointer Java_java_io_RandomAccessFile_initIDs Java_java_io_RandomAccessFile_length Java_java_io_RandomAccessFile_open0 Java_java_io_RandomAccessFile_read0 Java_java_io_RandomAccessFile_readBytes Java_java_io_RandomAccessFile_seek0 Java_java_io_RandomAccessFile_setLength Java_java_io_RandomAccessFile_write0 Java_java_io_RandomAccessFile_writeBytes Java_java_io_WinNTFileSystem_canonicalize0 Java_java_io_WinNTFileSystem_canonicalizeWithPrefix0 Java_java_io_WinNTFileSystem_checkAccess Java_java_io_WinNTFileSystem_createDirectory Java_java_io_WinNTFileSystem_createFileExclusively Java_java_io_WinNTFileSystem_delete0 Java_java_io_WinNTFileSystem_getBooleanAttributes Java_java_io_WinNTFileSystem_getDriveDirectory Java_java_io_WinNTFileSystem_getLastModifiedTime Java_java_io_WinNTFileSystem_getLength Java_java_io_WinNTFileSystem_getNameMax0 Java_java_io_WinNTFileSystem_getSpace0 Java_java_io_WinNTFileSystem_initIDs Java_java_io_WinNTFileSystem_list Java_java_io_WinNTFileSystem_listRoots0 Java_java_io_WinNTFileSystem_rename0 Java_java_io_WinNTFileSystem_setLastModifiedTime Java_java_io_WinNTFileSystem_setPermission Java_java_io_WinNTFileSystem_setReadOnly Java_java_lang_ProcessEnvironment_environmentBlock Java_java_lang_ProcessHandleImpl_00024Info_info0 Java_java_lang_ProcessHandleImpl_00024Info_initIDs Java_java_lang_ProcessHandleImpl_destroy0 Java_java_lang_ProcessHandleImpl_getCurrentPid0 Java_java_lang_ProcessHandleImpl_getProcessPids0 Java_java_lang_ProcessHandleImpl_initNative Java_java_lang_ProcessHandleImpl_isAlive0 Java_java_lang_ProcessHandleImpl_parent0 Java_java_lang_ProcessHandleImpl_waitForProcessExit0 Java_java_lang_ProcessImpl_closeHandle Java_java_lang_ProcessImpl_create Java_java_lang_ProcessImpl_getExitCodeProcess Java_java_lang_ProcessImpl_getProcessId0 Java_java_lang_ProcessImpl_getStillActive Java_java_lang_ProcessImpl_isProcessAlive Java_java_lang_ProcessImpl_openForAtomicAppend Java_java_lang_ProcessImpl_terminateProcess Java_java_lang_ProcessImpl_waitForInterruptibly Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly Java_java_lang_Shutdown_beforeHalt Java_java_lang_Shutdown_halt0 Java_java_lang_System_currentTimeMillis Java_java_lang_System_nanoTime Java_java_net_AbstractPlainDatagramSocketImpl_isReusePortAvailable0 Java_java_net_AbstractPlainSocketImpl_isReusePortAvailable0 Java_java_net_DatagramPacket_init Java_java_net_DualStackPlainDatagramSocketImpl_dataAvailable Java_java_net_DualStackPlainDatagramSocketImpl_initIDs Java_java_net_DualStackPlainDatagramSocketImpl_socketBind Java_java_net_DualStackPlainDatagramSocketImpl_socketClose Java_java_net_DualStackPlainDatagramSocketImpl_socketConnect Java_java_net_DualStackPlainDatagramSocketImpl_socketCreate Java_java_net_DualStackPlainDatagramSocketImpl_socketDisconnect Java_java_net_DualStackPlainDatagramSocketImpl_socketGetIntOption Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalAddress Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalPort Java_java_net_DualStackPlainDatagramSocketImpl_socketReceiveOrPeekData Java_java_net_DualStackPlainDatagramSocketImpl_socketSend Java_java_net_DualStackPlainDatagramSocketImpl_socketSetIntOption Java_java_net_Inet4AddressImpl_getHostByAddr Java_java_net_Inet4AddressImpl_getLocalHostName Java_java_net_Inet4AddressImpl_isReachable0 Java_java_net_Inet4AddressImpl_lookupAllHostAddr Java_java_net_Inet4Address_init Java_java_net_Inet6AddressImpl_getHostByAddr Java_java_net_Inet6AddressImpl_getLocalHostName Java_java_net_Inet6AddressImpl_isReachable0 Java_java_net_Inet6AddressImpl_lookupAllHostAddr Java_java_net_Inet6Address_init Java_java_net_InetAddressImplFactory_isIPv6Supported Java_java_net_InetAddress_init Java_java_net_NetworkInterface_getAll Java_java_net_NetworkInterface_getAll_XP Java_java_net_NetworkInterface_getByIndex0 Java_java_net_NetworkInterface_getByIndex0_XP Java_java_net_NetworkInterface_getByInetAddress0 Java_java_net_NetworkInterface_getByInetAddress0_XP Java_java_net_NetworkInterface_getByName0 Java_java_net_NetworkInterface_getByName0_XP Java_java_net_NetworkInterface_getMTU0 Java_java_net_NetworkInterface_getMTU0_XP Java_java_net_NetworkInterface_getMacAddr0 Java_java_net_NetworkInterface_getMacAddr0_XP Java_java_net_NetworkInterface_init Java_java_net_NetworkInterface_isLoopback0 Java_java_net_NetworkInterface_isLoopback0_XP Java_java_net_NetworkInterface_isP2P0 Java_java_net_NetworkInterface_isP2P0_XP Java_java_net_NetworkInterface_isUp0 Java_java_net_NetworkInterface_isUp0_XP Java_java_net_NetworkInterface_supportsMulticast0 Java_java_net_NetworkInterface_supportsMulticast0_XP Java_java_net_PlainSocketImpl_accept0 Java_java_net_PlainSocketImpl_available0 Java_java_net_PlainSocketImpl_bind0 Java_java_net_PlainSocketImpl_close0 Java_java_net_PlainSocketImpl_configureBlocking Java_java_net_PlainSocketImpl_connect0 Java_java_net_PlainSocketImpl_getIntOption Java_java_net_PlainSocketImpl_initIDs Java_java_net_PlainSocketImpl_listen0 Java_java_net_PlainSocketImpl_localAddress Java_java_net_PlainSocketImpl_localPort0 Java_java_net_PlainSocketImpl_sendOOB Java_java_net_PlainSocketImpl_setIntOption Java_java_net_PlainSocketImpl_setSoTimeout0 Java_java_net_PlainSocketImpl_shutdown0 Java_java_net_PlainSocketImpl_socket0 Java_java_net_PlainSocketImpl_waitForConnect Java_java_net_PlainSocketImpl_waitForNewConnection Java_java_net_SocketCleanable_cleanupClose0 Java_java_net_SocketInputStream_init Java_java_net_SocketInputStream_socketRead0 Java_java_net_SocketOutputStream_init Java_java_net_SocketOutputStream_socketWrite0 Java_java_net_TwoStacksPlainDatagramSocketImpl_bind0 Java_java_net_TwoStacksPlainDatagramSocketImpl_connect0 Java_java_net_TwoStacksPlainDatagramSocketImpl_dataAvailable Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketClose Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketCreate Java_java_net_TwoStacksPlainDatagramSocketImpl_disconnect0 Java_java_net_TwoStacksPlainDatagramSocketImpl_getTTL Java_java_net_TwoStacksPlainDatagramSocketImpl_getTimeToLive Java_java_net_TwoStacksPlainDatagramSocketImpl_init Java_java_net_TwoStacksPlainDatagramSocketImpl_join Java_java_net_TwoStacksPlainDatagramSocketImpl_leave Java_java_net_TwoStacksPlainDatagramSocketImpl_peek Java_java_net_TwoStacksPlainDatagramSocketImpl_peekData Java_java_net_TwoStacksPlainDatagramSocketImpl_receive0 Java_java_net_TwoStacksPlainDatagramSocketImpl_send0 Java_java_net_TwoStacksPlainDatagramSocketImpl_setTTL Java_java_net_TwoStacksPlainDatagramSocketImpl_setTimeToLive Java_java_net_TwoStacksPlainDatagramSocketImpl_socketGetOption Java_java_net_TwoStacksPlainDatagramSocketImpl_socketLocalAddress Java_java_net_TwoStacksPlainDatagramSocketImpl_socketNativeSetOption Java_java_util_TimeZone_getSystemGMTOffsetID Java_java_util_TimeZone_getSystemTimeZoneID Java_java_util_zip_CRC32_update Java_java_util_zip_CRC32_updateByteBuffer0 Java_java_util_zip_CRC32_updateBytes0 Java_java_util_zip_Inflater_end Java_java_util_zip_Inflater_getAdler Java_java_util_zip_Inflater_inflateBufferBuffer Java_java_util_zip_Inflater_inflateBufferBytes Java_java_util_zip_Inflater_inflateBytesBuffer Java_java_util_zip_Inflater_inflateBytesBytes Java_java_util_zip_Inflater_init Java_java_util_zip_Inflater_initIDs Java_java_util_zip_Inflater_reset Java_java_util_zip_Inflater_setDictionary Java_java_util_zip_Inflater_setDictionaryBuffer Java_jdk_internal_misc_VM_getNanoTimeAdjustment Java_jdk_net_Sockets_isReusePortAvailable0 Java_sun_net_dns_ResolverConfigurationImpl_init0 Java_sun_net_dns_ResolverConfigurationImpl_loadDNSconfig0 Java_sun_net_dns_ResolverConfigurationImpl_notifyAddrChange0 Java_sun_net_spi_DefaultProxySelector_getSystemProxies Java_sun_net_spi_DefaultProxySelector_init Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getCredentialsHandle Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getNextToken Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_initFirst Java_sun_nio_ch_DatagramChannelImpl_disconnect0 Java_sun_nio_ch_DatagramChannelImpl_initIDs Java_sun_nio_ch_DatagramChannelImpl_receive0 Java_sun_nio_ch_DatagramChannelImpl_send0 Java_sun_nio_ch_DatagramDispatcher_read0 Java_sun_nio_ch_DatagramDispatcher_readv0 Java_sun_nio_ch_DatagramDispatcher_write0 Java_sun_nio_ch_DatagramDispatcher_writev0 Java_sun_nio_ch_FileChannelImpl_initIDs Java_sun_nio_ch_FileChannelImpl_map0 Java_sun_nio_ch_FileChannelImpl_transferTo0 Java_sun_nio_ch_FileChannelImpl_unmap0 Java_sun_nio_ch_FileDispatcherImpl_close0 Java_sun_nio_ch_FileDispatcherImpl_duplicateHandle Java_sun_nio_ch_FileDispatcherImpl_force0 Java_sun_nio_ch_FileDispatcherImpl_lock0 Java_sun_nio_ch_FileDispatcherImpl_pread0 Java_sun_nio_ch_FileDispatcherImpl_pwrite0 Java_sun_nio_ch_FileDispatcherImpl_read0 Java_sun_nio_ch_FileDispatcherImpl_readv0 Java_sun_nio_ch_FileDispatcherImpl_release0 Java_sun_nio_ch_FileDispatcherImpl_seek0 Java_sun_nio_ch_FileDispatcherImpl_setDirect0 Java_sun_nio_ch_FileDispatcherImpl_size0 Java_sun_nio_ch_FileDispatcherImpl_truncate0 Java_sun_nio_ch_FileDispatcherImpl_write0 Java_sun_nio_ch_FileDispatcherImpl_writev0 Java_sun_nio_ch_FileKey_init Java_sun_nio_ch_FileKey_initIDs Java_sun_nio_ch_IOUtil_configureBlocking Java_sun_nio_ch_IOUtil_drain Java_sun_nio_ch_IOUtil_fdVal Java_sun_nio_ch_IOUtil_initIDs Java_sun_nio_ch_IOUtil_iovMax Java_sun_nio_ch_IOUtil_randomBytes Java_sun_nio_ch_IOUtil_setfdVal Java_sun_nio_ch_Net_bind0 Java_sun_nio_ch_Net_blockOrUnblock4 Java_sun_nio_ch_Net_blockOrUnblock6 Java_sun_nio_ch_Net_canIPv6SocketJoinIPv4Group0 Java_sun_nio_ch_Net_canJoin6WithIPv4Group0 Java_sun_nio_ch_Net_connect0 Java_sun_nio_ch_Net_getIntOption0 Java_sun_nio_ch_Net_getInterface4 Java_sun_nio_ch_Net_getInterface6 Java_sun_nio_ch_Net_initIDs Java_sun_nio_ch_Net_isExclusiveBindAvailable Java_sun_nio_ch_Net_isIPv6Available0 Java_sun_nio_ch_Net_isReusePortAvailable0 Java_sun_nio_ch_Net_joinOrDrop4 Java_sun_nio_ch_Net_joinOrDrop6 Java_sun_nio_ch_Net_listen Java_sun_nio_ch_Net_localInetAddress Java_sun_nio_ch_Net_localPort Java_sun_nio_ch_Net_poll Java_sun_nio_ch_Net_pollconnValue Java_sun_nio_ch_Net_pollerrValue Java_sun_nio_ch_Net_pollhupValue Java_sun_nio_ch_Net_pollinValue Java_sun_nio_ch_Net_pollnvalValue Java_sun_nio_ch_Net_polloutValue Java_sun_nio_ch_Net_remoteInetAddress Java_sun_nio_ch_Net_remotePort Java_sun_nio_ch_Net_setIntOption0 Java_sun_nio_ch_Net_setInterface4 Java_sun_nio_ch_Net_setInterface6 Java_sun_nio_ch_Net_shutdown Java_sun_nio_ch_Net_socket0 Java_sun_nio_ch_SocketChannelImpl_checkConnect Java_sun_nio_ch_SocketChannelImpl_initIDs Java_sun_nio_ch_SocketChannelImpl_sendOutOfBandData Java_sun_nio_ch_SocketDispatcher_close0 Java_sun_nio_ch_SocketDispatcher_preClose0 Java_sun_nio_ch_SocketDispatcher_read0 Java_sun_nio_ch_SocketDispatcher_readv0 Java_sun_nio_ch_SocketDispatcher_write0 Java_sun_nio_ch_SocketDispatcher_writev0 Java_sun_nio_fs_WindowsNativeDispatcher_AccessCheck Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessAllowedAceEx Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessDeniedAceEx Java_sun_nio_fs_WindowsNativeDispatcher_AdjustTokenPrivileges Java_sun_nio_fs_WindowsNativeDispatcher_CancelIo Java_sun_nio_fs_WindowsNativeDispatcher_CloseHandle Java_sun_nio_fs_WindowsNativeDispatcher_ConvertSidToStringSid Java_sun_nio_fs_WindowsNativeDispatcher_ConvertStringSidToSid0 Java_sun_nio_fs_WindowsNativeDispatcher_CopyFileEx0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateDirectory0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateEvent Java_sun_nio_fs_WindowsNativeDispatcher_CreateFile0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateHardLink0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateIoCompletionPort Java_sun_nio_fs_WindowsNativeDispatcher_CreateSymbolicLink0 Java_sun_nio_fs_WindowsNativeDispatcher_DeleteFile0 Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlGetReparsePoint Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlSetSparse Java_sun_nio_fs_WindowsNativeDispatcher_DuplicateTokenEx Java_sun_nio_fs_WindowsNativeDispatcher_FindClose Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile0 Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile1 Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstStream0 Java_sun_nio_fs_WindowsNativeDispatcher_FindNextFile Java_sun_nio_fs_WindowsNativeDispatcher_FindNextStream Java_sun_nio_fs_WindowsNativeDispatcher_FormatMessage Java_sun_nio_fs_WindowsNativeDispatcher_GetAce Java_sun_nio_fs_WindowsNativeDispatcher_GetAclInformation0 Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentProcess Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentThread Java_sun_nio_fs_WindowsNativeDispatcher_GetDiskFreeSpace0 Java_sun_nio_fs_WindowsNativeDispatcher_GetDiskFreeSpaceEx0 Java_sun_nio_fs_WindowsNativeDispatcher_GetDriveType0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributes0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributesEx0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFileInformationByHandle Java_sun_nio_fs_WindowsNativeDispatcher_GetFileSecurity0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFinalPathNameByHandle Java_sun_nio_fs_WindowsNativeDispatcher_GetFullPathName0 Java_sun_nio_fs_WindowsNativeDispatcher_GetLengthSid Java_sun_nio_fs_WindowsNativeDispatcher_GetLogicalDrives Java_sun_nio_fs_WindowsNativeDispatcher_GetOverlappedResult Java_sun_nio_fs_WindowsNativeDispatcher_GetQueuedCompletionStatus0 Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorDacl Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorOwner Java_sun_nio_fs_WindowsNativeDispatcher_GetTokenInformation Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumeInformation0 Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumePathName0 Java_sun_nio_fs_WindowsNativeDispatcher_InitializeAcl Java_sun_nio_fs_WindowsNativeDispatcher_InitializeSecurityDescriptor Java_sun_nio_fs_WindowsNativeDispatcher_LocalFree Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountName0 Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountSid0 Java_sun_nio_fs_WindowsNativeDispatcher_LookupPrivilegeValue0 Java_sun_nio_fs_WindowsNativeDispatcher_MoveFileEx0 Java_sun_nio_fs_WindowsNativeDispatcher_OpenProcessToken Java_sun_nio_fs_WindowsNativeDispatcher_OpenThreadToken Java_sun_nio_fs_WindowsNativeDispatcher_PostQueuedCompletionStatus Java_sun_nio_fs_WindowsNativeDispatcher_ReadDirectoryChangesW Java_sun_nio_fs_WindowsNativeDispatcher_RemoveDirectory0 Java_sun_nio_fs_WindowsNativeDispatcher_SetEndOfFile Java_sun_nio_fs_WindowsNativeDispatcher_SetFileAttributes0 Java_sun_nio_fs_WindowsNativeDispatcher_SetFileSecurity0 Java_sun_nio_fs_WindowsNativeDispatcher_SetFileTime Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorDacl Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorOwner Java_sun_nio_fs_WindowsNativeDispatcher_SetThreadToken Java_sun_nio_fs_WindowsNativeDispatcher_initIDs Java_sun_security_ec_ECDHKeyAgreement_deriveKey Java_sun_security_ec_ECDSASignature_signDigest Java_sun_security_ec_ECDSASignature_verifySignedDigest Java_sun_security_ec_ECKeyPairGenerator_generateECKeyPair Java_sun_security_ec_ECKeyPairGenerator_isCurveSupported Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed NET_Bind NET_BindV6 NET_EnableFastTcpLoopback NET_EnableFastTcpLoopbackConnect NET_GetPortFromSockaddr NET_GetSockOpt NET_InetAddressToSockaddr NET_MapSocketOption NET_MapSocketOptionV6 NET_SetSockOpt NET_SockaddrEqualsInetAddress NET_SockaddrToInetAddress NET_SocketClose NET_ThrowNew NET_Timeout NET_Timeout2 NET_Wait NET_WinBind NewStringPlatform WindowsSubstrateSegfaultHandler__handler__e4ef6b716ca19d889d8c88199f44a529900bb37b ZIP_CRC32 ZIP_Close ZIP_FindEntry ZIP_GZip_Fully ZIP_GZip_InitParams ZIP_GetNextEntry ZIP_InflateFully ZIP_Open ZIP_ReadEntry __svm_code_section __svm_version_info __svm_vm_is_static_binary __svm_vm_java_version __svm_vm_target_ccompiler __svm_vm_target_libc __svm_vm_target_libraries __svm_vm_target_platform __svm_vm_target_staticlibraries getErrorString getLastErrorString getPrefixed graal_attach_thread graal_create_isolate graal_detach_all_threads_and_tear_down_isolate graal_detach_thread graal_get_current_thread graal_get_isolate graal_tear_down_isolate graal_vm_locator_symbol handleLseek handleRead initInetAddressIDs initialize ipv6_available jio_fprintf jio_snprintf main reuseport_available throwFileNotFoundException winFileHandleOpen

Name

.text

Size

12.9MB

Virtual Size

12.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

136KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svm_hea

Size

23.7MB

Virtual Size

23.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

72KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar

version

advapi32

ws2_32

userenv

mswsock

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

winhttp

secur32

iphlpapi

generic