General

  • Target
    2026-08-03_c3c6041ff7a3164de0a7ef8dc4ae3025_blankgrabber_cobalt-strike_coinminer_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_satacom_stealc
  • Size 22.4MB
  • Sample260803-rcfnhssthv
  • SHA256 5cf25aa9e677f5850cb5c82af8e278d1a03deecba384b7c52e9c2f70237012da
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-08-03_c3c6041ff7a3164de0a7ef8dc4ae3025_blankgrabber_cobalt-strike_coinminer_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos_satacom_stealc
    • Size 22.4MB
    • SHA256 5cf25aa9e677f5850cb5c82af8e278d1a03deecba384b7c52e9c2f70237012da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects executables packed with VMProtect.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks