General
- Target 2026-08-03_f6c86a7e1e6fa493e2da868509132c9a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc
- Size 5.8MB
- Sample260804-kvbc7abn6t
- SHA256 6f47f9d7154bcad33f9d128ded7132071c63c8562dace449cf1e5434ca6611e7
- MD5 f6c86a7e1e6fa493e2da868509132c9a
- SHA1 801b1e60d526da65b51a73eec6ce7ee3cd3b6e7a
- SHA512 ebba515bcfc181b5929ec8a03ab8c230ea63912d57a5221ddf6b8fe4600857b4783112072b5ba70f8382762e004429b960e107d3f4455e0eacc71b52c39def8a
- SSDEEP 49152:cGtlqsvhVwASOGpW8/uEMgSR2OXY/f5aNUbCaCX0/+IEBLxEXPqjFUzJOcWWOPnd:sHfOoX4CvjXXzkdZjL+XiT
- TLSH T1B956AE69A6BC00D5E86AD1BDC2865223EB72B81513B05BCF1A549BF61F23AD01F7F740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f6c86a7e1e6fa493e2da868509132c9a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_f6c86a7e1e6fa493e2da868509132c9a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f6c86a7e1e6fa493e2da868509132c9a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc
- Size 5.8MB
- SHA256 6f47f9d7154bcad33f9d128ded7132071c63c8562dace449cf1e5434ca6611e7
- MD5 f6c86a7e1e6fa493e2da868509132c9a
- SHA1 801b1e60d526da65b51a73eec6ce7ee3cd3b6e7a
- SHA512 ebba515bcfc181b5929ec8a03ab8c230ea63912d57a5221ddf6b8fe4600857b4783112072b5ba70f8382762e004429b960e107d3f4455e0eacc71b52c39def8a
- SSDEEP 49152:cGtlqsvhVwASOGpW8/uEMgSR2OXY/f5aNUbCaCX0/+IEBLxEXPqjFUzJOcWWOPnd:sHfOoX4CvjXXzkdZjL+XiT
- TLSH T1B956AE69A6BC00D5E86AD1BDC2865223EB72B81513B05BCF1A549BF61F23AD01F7F740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE