General
- Target 2026-07-27_834e0ee6c30ea480dc36745db05a0df8_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.3MB
- Sample260727-nel2ja1blg
- SHA256 c67e7a56380db2ee717e308bc714e30b044087bec221f8791eb3bc33242aed85
- MD5 834e0ee6c30ea480dc36745db05a0df8
- SHA1 19d586c19353ae934e75b19ca53d1b80ee628a25
- SHA512 5a01fcf919f95824f5205b8f98317cb86e43c2599977f3e506f1bff03c5859e697886a9005d223048015f90fb3a47ae75864fd07808e39fa76e9625e892aec76
- SSDEEP 196608:l7ovva4a5u/CExDjfOB0loiB32hVZc3DgPrAOz8:ECExDCB0loilMZ6gjA
- TLSH T17BE69E6A62BC00E8D4BBD17CC6469617E7B1741613705BDF1BA08AEA1F63BE41E3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_834e0ee6c30ea480dc36745db05a0df8_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_834e0ee6c30ea480dc36745db05a0df8_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_834e0ee6c30ea480dc36745db05a0df8_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.3MB
- SHA256 c67e7a56380db2ee717e308bc714e30b044087bec221f8791eb3bc33242aed85
- MD5 834e0ee6c30ea480dc36745db05a0df8
- SHA1 19d586c19353ae934e75b19ca53d1b80ee628a25
- SHA512 5a01fcf919f95824f5205b8f98317cb86e43c2599977f3e506f1bff03c5859e697886a9005d223048015f90fb3a47ae75864fd07808e39fa76e9625e892aec76
- SSDEEP 196608:l7ovva4a5u/CExDjfOB0loiB32hVZc3DgPrAOz8:ECExDCB0loilMZ6gjA
- TLSH T17BE69E6A62BC00E8D4BBD17CC6469617E7B1741613705BDF1BA08AEA1F63BE41E3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory