General
- Target 2026-08-03_d0a7f0d46059c764636ca2d8a6ef74c1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.3MB
- Sample260804-lj81rack2w
- SHA256 7d892bffdd9851372522c026236495a79266985c7ff5dff9cf4157dc57a3f9cb
- MD5 d0a7f0d46059c764636ca2d8a6ef74c1
- SHA1 e210b8fe0002201d8a1f0cbd9766091bee4efa0a
- SHA512 921ad069474b4b6c990a31a1547fab94cc07736fc3a451dbbeb95485ef655a8709f8d9115c361e6f93090d60c86e64034cd0a9b72eb36a50e4d72e6e52edc8c3
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfZ:fMguj8Q4VfviqFTrYl
- TLSH T1B0878B0773E60195E5B7D2388AA74507D773B8634331CBDF329D06152FABAE09A7A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_d0a7f0d46059c764636ca2d8a6ef74c1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d0a7f0d46059c764636ca2d8a6ef74c1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d0a7f0d46059c764636ca2d8a6ef74c1_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.3MB
- SHA256 7d892bffdd9851372522c026236495a79266985c7ff5dff9cf4157dc57a3f9cb
- MD5 d0a7f0d46059c764636ca2d8a6ef74c1
- SHA1 e210b8fe0002201d8a1f0cbd9766091bee4efa0a
- SHA512 921ad069474b4b6c990a31a1547fab94cc07736fc3a451dbbeb95485ef655a8709f8d9115c361e6f93090d60c86e64034cd0a9b72eb36a50e4d72e6e52edc8c3
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfZ:fMguj8Q4VfviqFTrYl
- TLSH T1B0878B0773E60195E5B7D2388AA74507D773B8634331CBDF329D06152FABAE09A7A720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.