General
- Target 2026-08-04_3794d55e2cf0c9bf8f431c48192d714c_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_qakbot_satacom_stealc
- Size 6.0MB
- Sample260804-jj73cazsct
- SHA256 54bd865b0c5478c32c66164f485fe62854b83ce849b84a40477ccb50c8ad2ee0
- MD5 3794d55e2cf0c9bf8f431c48192d714c
- SHA1 42577e9ea2af784694371cd516bbcc2a4cb8fdc5
- SHA512 506e2a839b75942495e9948ff8da5d46e6e311bf260ce25f78740df4346a37cc5d58436c3405889b2540afa37e8948d273b72b5bd8f16b988d67c61dde5315a6
- SSDEEP 98304:5l+0x9FjO509xZqNcxfH64NWg/29z4VkslgJTIZ5Bgp:Xhx9M509XqNcxfH64Ix9zMksT6p
- TLSH T17856AE56A6A450ECD5B7C178CA468617E7F2BC0513719BCF06A0A67A1F33AE12F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_3794d55e2cf0c9bf8f431c48192d714c_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_3794d55e2cf0c9bf8f431c48192d714c_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_qakbot_satacom_stealc
- Size 6.0MB
- SHA256 54bd865b0c5478c32c66164f485fe62854b83ce849b84a40477ccb50c8ad2ee0
- MD5 3794d55e2cf0c9bf8f431c48192d714c
- SHA1 42577e9ea2af784694371cd516bbcc2a4cb8fdc5
- SHA512 506e2a839b75942495e9948ff8da5d46e6e311bf260ce25f78740df4346a37cc5d58436c3405889b2540afa37e8948d273b72b5bd8f16b988d67c61dde5315a6
- SSDEEP 98304:5l+0x9FjO509xZqNcxfH64NWg/29z4VkslgJTIZ5Bgp:Xhx9M509XqNcxfH64Ix9zMksT6p
- TLSH T17856AE56A6A450ECD5B7C178CA468617E7F2BC0513719BCF06A0A67A1F33AE12F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1