General
- Target 2026-07-31_fffa5bc7a9b7149e21fcbfcfed5a5278_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 81.3MB
- Sample260731-he96gaec57
- SHA256 9a28d80ce2c191d743554313edbb8eef09e6f72b34c4d701c0a84090d61264e9
- MD5 fffa5bc7a9b7149e21fcbfcfed5a5278
- SHA1 0d641fc2aab13afee8697f40d9a1e2917d4e4fc7
- SHA512 e939f9c819ae356da8e7bd37e57e8f6c8f33b6664ad22432e2c90fb91cffb4d5c3a251fc816e3d0b1eb209a7b96e6ae66559b3e92088f9dc92e96edb2ff65368
- SSDEEP 393216:JbVP3plrd1a9hQeMiIqEtYCMyb2mZtt0eyXUBUmKCeft92UF+33XL1paSK0iGnNy:JNZ7PBDiqpbnN2uUGwZMpgPVlcm/lllR
- TLSH T151187B4263F609D6E9FB9A3489E65213D673BC063B3086CB324C177A1F736E08976761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_fffa5bc7a9b7149e21fcbfcfed5a5278_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_fffa5bc7a9b7149e21fcbfcfed5a5278_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_fffa5bc7a9b7149e21fcbfcfed5a5278_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 81.3MB
- SHA256 9a28d80ce2c191d743554313edbb8eef09e6f72b34c4d701c0a84090d61264e9
- MD5 fffa5bc7a9b7149e21fcbfcfed5a5278
- SHA1 0d641fc2aab13afee8697f40d9a1e2917d4e4fc7
- SHA512 e939f9c819ae356da8e7bd37e57e8f6c8f33b6664ad22432e2c90fb91cffb4d5c3a251fc816e3d0b1eb209a7b96e6ae66559b3e92088f9dc92e96edb2ff65368
- SSDEEP 393216:JbVP3plrd1a9hQeMiIqEtYCMyb2mZtt0eyXUBUmKCeft92UF+33XL1paSK0iGnNy:JNZ7PBDiqpbnN2uUGwZMpgPVlcm/lllR
- TLSH T151187B4263F609D6E9FB9A3489E65213D673BC063B3086CB324C177A1F736E08976761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Enumerates processes with tasklist