General
- Target 2026-08-04_40ad7664a00d63db4247ce564a8b9e26_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 95.0MB
- Sample260804-thp59athkf
- SHA256 e26e3191735b4def623a6e720a232abf195b71f0644e6be5ebb0a1eaa6285cad
- MD5 40ad7664a00d63db4247ce564a8b9e26
- SHA1 9cbc974cce85f4c5c6d7c9dee28c36a5b943ef40
- SHA512 f42b5995fd1fb9f32218f00807b79521b6fc4632ae983e5b09a63669dd5c69150f1d46e4063755bc2a4f1b6bea614ba72fb37943b2c2a0c359795cd8f3286723
- SSDEEP 393216:13pr0gjHmFbXCDG/E+3xYeVQNCdejDj2JbIqkuQsFoHpeiKARQlt2zMpzZmPXmtR:1SAFTJrgY+trrPulBQqRJ27
- TLSH T116286B4267EA0585F9F7DA358AF64617C673BC466B3086CF214C0B2A1F736E08D76B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_40ad7664a00d63db4247ce564a8b9e26_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_40ad7664a00d63db4247ce564a8b9e26_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 95.0MB
- SHA256 e26e3191735b4def623a6e720a232abf195b71f0644e6be5ebb0a1eaa6285cad
- MD5 40ad7664a00d63db4247ce564a8b9e26
- SHA1 9cbc974cce85f4c5c6d7c9dee28c36a5b943ef40
- SHA512 f42b5995fd1fb9f32218f00807b79521b6fc4632ae983e5b09a63669dd5c69150f1d46e4063755bc2a4f1b6bea614ba72fb37943b2c2a0c359795cd8f3286723
- SSDEEP 393216:13pr0gjHmFbXCDG/E+3xYeVQNCdejDj2JbIqkuQsFoHpeiKARQlt2zMpzZmPXmtR:1SAFTJrgY+trrPulBQqRJ27
- TLSH T116286B4267EA0585F9F7DA358AF64617C673BC466B3086CF214C0B2A1F736E08D76B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.