General
- Target 2026-07-31_7bd4643262ed529c9cc6d3aecdaf772c_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 20.0MB
- Sample260731-3n7rxstscs
- SHA256 2060b131325d0e32199bb28467e037f8797d82c28a35b1294fa362878d2672bf
- MD5 7bd4643262ed529c9cc6d3aecdaf772c
- SHA1 0ee7998327eb65e7f798bf5767787ed5a3a2526b
- SHA512 da7fab40463d6ee444448f05c623c08a4d9e32b1c7285a7234068bf22380bd009f5224fd93d730420ad6daf28d2e4ce31108fb83675655ff6f46a6a32b448e44
- SSDEEP 393216:ElrOdyD+/loG+u6fb+SJ8aqq1CPwDvt3uFhCoFe9Xbxs4eBM609t3:EROQD+/loYgt3
- TLSH T122277C4576A08466F8B6F279C517060BF370FCA16710C7CB2165B26A2F73BD12E7A6C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_7bd4643262ed529c9cc6d3aecdaf772c_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_7bd4643262ed529c9cc6d3aecdaf772c_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_7bd4643262ed529c9cc6d3aecdaf772c_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 20.0MB
- SHA256 2060b131325d0e32199bb28467e037f8797d82c28a35b1294fa362878d2672bf
- MD5 7bd4643262ed529c9cc6d3aecdaf772c
- SHA1 0ee7998327eb65e7f798bf5767787ed5a3a2526b
- SHA512 da7fab40463d6ee444448f05c623c08a4d9e32b1c7285a7234068bf22380bd009f5224fd93d730420ad6daf28d2e4ce31108fb83675655ff6f46a6a32b448e44
- SSDEEP 393216:ElrOdyD+/loG+u6fb+SJ8aqq1CPwDvt3uFhCoFe9Xbxs4eBM609t3:EROQD+/loYgt3
- TLSH T122277C4576A08466F8B6F279C517060BF370FCA16710C7CB2165B26A2F73BD12E7A6C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL