General
- Target 2026-08-02_172076b75bf0b658c0973ccb86d51fbb_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.2MB
- Sample260802-k21xeszclf
- SHA256 874136070f4a5da60f79831bd33221d41fd43e9324a0929aa276818fc0848b00
- MD5 172076b75bf0b658c0973ccb86d51fbb
- SHA1 9d5a7b796c8352a5e463e8c7e8e60a8fc3bd3e4b
- SHA512 5fd62fce82cc6b1fa59af529e5a53ff0a6f5cd4784f778e4c81bc4962737285bebb66371b268663162c597b08e55e0d4aad9d4a392af680cf86563aa060690e1
- SSDEEP 98304:LFv06gy0fBGbWIkcRMjJnGaJKttRby0tfZeT007kxc7wRGpj3:Lcy0fBEdkcRMjdGWKtthT9Z90764F9
- TLSH T1A386C057A7D800E8D8B6C17CCA978503EBB2B85157319BDF06A4567A0F73AE05E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_172076b75bf0b658c0973ccb86d51fbb_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_172076b75bf0b658c0973ccb86d51fbb_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.2MB
- SHA256 874136070f4a5da60f79831bd33221d41fd43e9324a0929aa276818fc0848b00
- MD5 172076b75bf0b658c0973ccb86d51fbb
- SHA1 9d5a7b796c8352a5e463e8c7e8e60a8fc3bd3e4b
- SHA512 5fd62fce82cc6b1fa59af529e5a53ff0a6f5cd4784f778e4c81bc4962737285bebb66371b268663162c597b08e55e0d4aad9d4a392af680cf86563aa060690e1
- SSDEEP 98304:LFv06gy0fBGbWIkcRMjJnGaJKttRby0tfZeT007kxc7wRGpj3:Lcy0fBEdkcRMjdGWKtthT9Z90764F9
- TLSH T1A386C057A7D800E8D8B6C17CCA978503EBB2B85157319BDF06A4567A0F73AE05E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1