General
- Target 2026-08-03_af0f2b058ad87a4076865fd2d54e8fc1_cobalt-strike_coinminer_glassworm_icedid_njrat
- Size 17.0MB
- Sample260804-l9f3nahd57
- SHA256 a58ae8bed51ce7ec19425100bd15a5a0201e2fc1677e0ee0eb82a29633983127
- MD5 af0f2b058ad87a4076865fd2d54e8fc1
- SHA1 2a7652e845032c3d0ac49fa02744fcef9ba670f7
- SHA512 dc5c14f06ff1ee6edeaddc9d412cad16670af7c50a2c7ef570b6a916a80e3671943870f0dded107f4f5ed60f3206cf1d53213daa5deac80b98c231355c6ff117
- SSDEEP 393216:Bw/AU+3I6VcDGz50wq9fjv4kjlbUhWoOt/K/4rUB8M/:BHfz5vsfjv4kBtFiArd
- TLSH T1E907F169B29411D8C07BC138C9539617E3B2B859177487DF32E5A6A51F73AE0AE3FB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_af0f2b058ad87a4076865fd2d54e8fc1_cobalt-strike_coinminer_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_af0f2b058ad87a4076865fd2d54e8fc1_cobalt-strike_coinminer_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_af0f2b058ad87a4076865fd2d54e8fc1_cobalt-strike_coinminer_glassworm_icedid_njrat
- Size 17.0MB
- SHA256 a58ae8bed51ce7ec19425100bd15a5a0201e2fc1677e0ee0eb82a29633983127
- MD5 af0f2b058ad87a4076865fd2d54e8fc1
- SHA1 2a7652e845032c3d0ac49fa02744fcef9ba670f7
- SHA512 dc5c14f06ff1ee6edeaddc9d412cad16670af7c50a2c7ef570b6a916a80e3671943870f0dded107f4f5ed60f3206cf1d53213daa5deac80b98c231355c6ff117
- SSDEEP 393216:Bw/AU+3I6VcDGz50wq9fjv4kjlbUhWoOt/K/4rUB8M/:BHfz5vsfjv4kBtFiArd
- TLSH T1E907F169B29411D8C07BC138C9539617E3B2B859177487DF32E5A6A51F73AE0AE3FB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.