General
- Target 2026-07-31_08d9657122c5d691677d7be7fe1c2368_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.1MB
- Sample260731-1yd69ascjc
- SHA256 5e3ccc6ef02fae599dc1aaa853b29ccb1ee0efeab1d7142c040065af897d47dc
- MD5 08d9657122c5d691677d7be7fe1c2368
- SHA1 4354d0b3c2e70668f4c17e0e49446724bcae9410
- SHA512 af47b42afd298724f8973ec7fb38c8e01ddfe16f0ffb60efbabf4c8351c36a814915bd5f93e9b56259c2a86a37050cebefb5e67b883b360b434bb69196721b27
- SSDEEP 196608:w8AYpxDSOYjKq7cV7j2hbVw/blCEyP5E32Ghih0pjwH/e:FMcq7cJj2F+jlCEyBOpU
- TLSH T19CD69D6A62BC00E8D4BBD17CC6469617E7B1781603705BDF1AA086FA1F63BE41E7E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_08d9657122c5d691677d7be7fe1c2368_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_08d9657122c5d691677d7be7fe1c2368_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_08d9657122c5d691677d7be7fe1c2368_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.1MB
- SHA256 5e3ccc6ef02fae599dc1aaa853b29ccb1ee0efeab1d7142c040065af897d47dc
- MD5 08d9657122c5d691677d7be7fe1c2368
- SHA1 4354d0b3c2e70668f4c17e0e49446724bcae9410
- SHA512 af47b42afd298724f8973ec7fb38c8e01ddfe16f0ffb60efbabf4c8351c36a814915bd5f93e9b56259c2a86a37050cebefb5e67b883b360b434bb69196721b27
- SSDEEP 196608:w8AYpxDSOYjKq7cV7j2hbVw/blCEyP5E32Ghih0pjwH/e:FMcq7cJj2F+jlCEyBOpU
- TLSH T19CD69D6A62BC00E8D4BBD17CC6469617E7B1781603705BDF1AA086FA1F63BE41E7E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1