General
- Target 2026-08-02_9c9c9d02295c5c08b6ad9ee2f65a6167_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.2MB
- Sample260802-j5e9fsybla
- SHA256 a1676a2e6b8a50f10f8aac76fd350fb4a45b8ced0a41bb57edaacb9ed7595afa
- MD5 9c9c9d02295c5c08b6ad9ee2f65a6167
- SHA1 35080a47ca206bb76894ecff4ba6ff0235a7ad24
- SHA512 f3e03f238161a0c88e5031ba4bdd6e700dd24c0da8463f7cea2a3ca43933156f5af7fcf7183f0b85c7bf4460edbce66b90d3abbc412f65e711e87596b1255e5f
- SSDEEP 98304:Mgo4DknwzlPhPxYmzkRm6wZ1i0tsKzDeT007kxw7wRGpj3:MZWknwzrPxhzmm681i0ts0D9076sF9
- TLSH T14296B05BA7E800E8D8B7D17CC9978503EBB2B81157319BDF06A4566A0F73AE05E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_9c9c9d02295c5c08b6ad9ee2f65a6167_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_9c9c9d02295c5c08b6ad9ee2f65a6167_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.2MB
- SHA256 a1676a2e6b8a50f10f8aac76fd350fb4a45b8ced0a41bb57edaacb9ed7595afa
- MD5 9c9c9d02295c5c08b6ad9ee2f65a6167
- SHA1 35080a47ca206bb76894ecff4ba6ff0235a7ad24
- SHA512 f3e03f238161a0c88e5031ba4bdd6e700dd24c0da8463f7cea2a3ca43933156f5af7fcf7183f0b85c7bf4460edbce66b90d3abbc412f65e711e87596b1255e5f
- SSDEEP 98304:Mgo4DknwzlPhPxYmzkRm6wZ1i0tsKzDeT007kxw7wRGpj3:MZWknwzrPxhzmm681i0ts0D9076sF9
- TLSH T14296B05BA7E800E8D8B7D17CC9978503EBB2B81157319BDF06A4566A0F73AE05E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1