General
- Target 2026-07-31_468ec239cd85bfd63aaa47133593cd05_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.6MB
- Sample260731-e1kk6awscw
- SHA256 de05554df5573494e31575e0f4725d6ee77ac8be14fb6cdf3a22b06998a2add6
- MD5 468ec239cd85bfd63aaa47133593cd05
- SHA1 a526bd30a08ef7302b2681d3b0cb6366313f5a2c
- SHA512 a2ec30e3d7dc77b630ca1f9589387c481f3d3358fb169e16197812f1188e6acab71f777f0537230ac633c03a3053d4f0c8c8c65f06d5d8b13eeb235b593e73f3
- SSDEEP 49152:dJxO5tmuSoHE4RtMMoLPqf/nkMq1BmwlxMOqSv63i36i6X43jtPQ6zU+5pAqIPIs:rY5tY4RMk6lxMObJ6/tba9SVN55
- TLSH T1F9269E57A7A901E8D866C23CC4678603E7B2BC151770A7CF0664627A1FB3AE25F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_468ec239cd85bfd63aaa47133593cd05_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_468ec239cd85bfd63aaa47133593cd05_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_468ec239cd85bfd63aaa47133593cd05_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 4.6MB
- SHA256 de05554df5573494e31575e0f4725d6ee77ac8be14fb6cdf3a22b06998a2add6
- MD5 468ec239cd85bfd63aaa47133593cd05
- SHA1 a526bd30a08ef7302b2681d3b0cb6366313f5a2c
- SHA512 a2ec30e3d7dc77b630ca1f9589387c481f3d3358fb169e16197812f1188e6acab71f777f0537230ac633c03a3053d4f0c8c8c65f06d5d8b13eeb235b593e73f3
- SSDEEP 49152:dJxO5tmuSoHE4RtMMoLPqf/nkMq1BmwlxMOqSv63i36i6X43jtPQ6zU+5pAqIPIs:rY5tY4RMk6lxMObJ6/tba9SVN55
- TLSH T1F9269E57A7A901E8D866C23CC4678603E7B2BC151770A7CF0664627A1FB3AE25F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1