General
- Target 2026-07-28_7cd52cde8bf2043002605b4b1bad3f16_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.3MB
- Sample260729-a9cjpadb97
- SHA256 8fe4f0f462577a541e3816142249e0dd29eec823d0c7e2a38f5cbee92192bff2
- MD5 7cd52cde8bf2043002605b4b1bad3f16
- SHA1 d205c8ee1d9d68ad7c793befc2890ea50f699761
- SHA512 16e88984093f3abb05eef9a7b58e241042fac3cd4d7363b97da4aed4b67fb73e2622fbd06689ee8ef3f713d392c00faca51e8627e000d754fe0b55a87167ed01
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf4:fMguj8Q4VfvAqFTrY2
- TLSH T16B878B0773E60195E5B7D2388AA74507D773B8634331CBDF329D06152FABAE09A7A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_7cd52cde8bf2043002605b4b1bad3f16_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_7cd52cde8bf2043002605b4b1bad3f16_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_7cd52cde8bf2043002605b4b1bad3f16_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.3MB
- SHA256 8fe4f0f462577a541e3816142249e0dd29eec823d0c7e2a38f5cbee92192bff2
- MD5 7cd52cde8bf2043002605b4b1bad3f16
- SHA1 d205c8ee1d9d68ad7c793befc2890ea50f699761
- SHA512 16e88984093f3abb05eef9a7b58e241042fac3cd4d7363b97da4aed4b67fb73e2622fbd06689ee8ef3f713d392c00faca51e8627e000d754fe0b55a87167ed01
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf4:fMguj8Q4VfvAqFTrY2
- TLSH T16B878B0773E60195E5B7D2388AA74507D773B8634331CBDF329D06152FABAE09A7A720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used control the browser and steal sensitive information such as credentials and session cookies.