General
- Target 2026-08-05_691fe18945d5cd15774e3c88d312f575_cobalt-strike_coinminer_dosia_glassworm_icedid_njrat_quasar-rat_vidar
- Size 55.2MB
- Sample260805-gpddtaee27
- SHA256 ffe6690e740b95d0239425982dc0236329e0d84123586bfc6fa62decbba69a51
- MD5 691fe18945d5cd15774e3c88d312f575
- SHA1 edc61855794ad547753cc5e1082a74faf62e9d2e
- SHA512 4db1f14fb8f396336f2d328626b50aa0d2c241a62c322e1b177b40cedb9d43ed1cd78db9ba6e0459ee1be599fb808882ac51dc7346d0989efb022d054a079801
- SSDEEP 196608:InnmbV2qWwRNTc+u1aZfO8pP+QDhb6Z/LzEnSQ5Ps6z:iSRe9QDT
- TLSH T1A1C78406F702899AD4799338488B4F91B372ECF14AB6972323B8733D2EFA35C5E91545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_691fe18945d5cd15774e3c88d312f575_cobalt-strike_coinminer_dosia_glassworm_icedid_njrat_quasar-rat_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_691fe18945d5cd15774e3c88d312f575_cobalt-strike_coinminer_dosia_glassworm_icedid_njrat_quasar-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_691fe18945d5cd15774e3c88d312f575_cobalt-strike_coinminer_dosia_glassworm_icedid_njrat_quasar-rat_vidar
- Size 55.2MB
- SHA256 ffe6690e740b95d0239425982dc0236329e0d84123586bfc6fa62decbba69a51
- MD5 691fe18945d5cd15774e3c88d312f575
- SHA1 edc61855794ad547753cc5e1082a74faf62e9d2e
- SHA512 4db1f14fb8f396336f2d328626b50aa0d2c241a62c322e1b177b40cedb9d43ed1cd78db9ba6e0459ee1be599fb808882ac51dc7346d0989efb022d054a079801
- SSDEEP 196608:InnmbV2qWwRNTc+u1aZfO8pP+QDhb6Z/LzEnSQ5Ps6z:iSRe9QDT
- TLSH T1A1C78406F702899AD4799338488B4F91B372ECF14AB6972323B8733D2EFA35C5E91545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1