General
- Target 2026-07-31_1144eab8679a72e6612abf5ef62af779_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_utkonos_vidar_zxxz
- Size 82.5MB
- Sample260731-sb92eaal9w
- SHA256 d52894f027b8ce185efa3f584024b8a9a7f6694f6e294aba8ddac9789d00468f
- MD5 1144eab8679a72e6612abf5ef62af779
- SHA1 5b73ed84e7eb119d2cf0ceec0ebb89e8bcc19e7f
- SHA512 c97e1509530b07c9fc57a1e6c6482f87d25c1f222356814f45fa4b907b4b026132730c0f03cab934c0e8478f6697c10ff3e7dbe270f59c41bd1459b22a54a34a
- SSDEEP 393216:EbVP3plrd1a9hQeMiIqEtYCMyb2mZtt0eyXUBUmKCeft92UF+33XL1paSK0iGnNf:ENZ7PBDiqpbnN2uUGwZMpgPVlcm/lllY
- TLSH T1BE187C4263F609D6E9FB9A348AE65213D633BC063B3085CF624C17761F736E089B6761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_1144eab8679a72e6612abf5ef62af779_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_1144eab8679a72e6612abf5ef62af779_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_1144eab8679a72e6612abf5ef62af779_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_utkonos_vidar_zxxz
- Size 82.5MB
- SHA256 d52894f027b8ce185efa3f584024b8a9a7f6694f6e294aba8ddac9789d00468f
- MD5 1144eab8679a72e6612abf5ef62af779
- SHA1 5b73ed84e7eb119d2cf0ceec0ebb89e8bcc19e7f
- SHA512 c97e1509530b07c9fc57a1e6c6482f87d25c1f222356814f45fa4b907b4b026132730c0f03cab934c0e8478f6697c10ff3e7dbe270f59c41bd1459b22a54a34a
- SSDEEP 393216:EbVP3plrd1a9hQeMiIqEtYCMyb2mZtt0eyXUBUmKCeft92UF+33XL1paSK0iGnNf:ENZ7PBDiqpbnN2uUGwZMpgPVlcm/lllY
- TLSH T1BE187C4263F609D6E9FB9A348AE65213D633BC063B3085CF624C17761F736E089B6761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.