General
- Target 2026-08-03_a76242ec1b3bd57add7e647310ecd456_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_pos_stealc_vidar
- Size 41.8MB
- Sample260803-kx29paselb
- SHA256 7bbec161c5414c01d7ffc1b571c187a128fbfb54c952e2f8fafbb8e8ab5100ab
- MD5 a76242ec1b3bd57add7e647310ecd456
- SHA1 2e1cc1a9345e1ef3afd2701e1a8563b9a298af6e
- SHA512 10206d2aac0c7b0709fff1777ec867cc98064c50a306cf2d0d103f22fc11111f39e8722e6b8a885840b9bc6c3f3f38c08f22dcbad33405c5f322b99d268b547e
- SSDEEP 393216:u0DqRP2jAxAUnwM6qPTVpgtqO5f1CPwDvt3uFhCQgFe9Xby6ijIV/l1pe7KTAzYG:CP2jAEqCI85
- TLSH T166A77C03337801A4E962D17C99635207E771BC0DA72562EB26A4F65E2FB7BD18B7E304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a76242ec1b3bd57add7e647310ecd456_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a76242ec1b3bd57add7e647310ecd456_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a76242ec1b3bd57add7e647310ecd456_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_pos_stealc_vidar
- Size 41.8MB
- SHA256 7bbec161c5414c01d7ffc1b571c187a128fbfb54c952e2f8fafbb8e8ab5100ab
- MD5 a76242ec1b3bd57add7e647310ecd456
- SHA1 2e1cc1a9345e1ef3afd2701e1a8563b9a298af6e
- SHA512 10206d2aac0c7b0709fff1777ec867cc98064c50a306cf2d0d103f22fc11111f39e8722e6b8a885840b9bc6c3f3f38c08f22dcbad33405c5f322b99d268b547e
- SSDEEP 393216:u0DqRP2jAxAUnwM6qPTVpgtqO5f1CPwDvt3uFhCQgFe9Xby6ijIV/l1pe7KTAzYG:CP2jAEqCI85
- TLSH T166A77C03337801A4E962D17C99635207E771BC0DA72562EB26A4F65E2FB7BD18B7E304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Loads dropped DLL