General
- Target 2026-08-07_0cd9b6173d1279e593f05075ba6298f2_blankgrabber_cobalt-strike_coinminer_emotet_glassworm_icedid_luca-stealer_njrat_poet-rat_satacom_stealc_vidar
- Size 63.6MB
- Sample260807-3yjg3swakb
- SHA256 35a89ba86eb92a7c2184a62006cc62f8fbef17b6a120d268f23b37f14eb204eb
- MD5 0cd9b6173d1279e593f05075ba6298f2
- SHA1 a30a9d5c01293b2128ff70faadd4a5df3648f8fa
- SHA512 d381e15837827799d725f9d565325ca4fc04fb44249d3922b846780fd0b92463a5da8aebfc6e8ee0ef24888b17140a5d779780aebecd895af15985ff6452640e
- SSDEEP 786432:vccz1kZYJvlPXT3ezwLvoYA5wdFtuCfTgkqMvoWIP7Uk:vyZYJv5XLvoY4GTQUk
- TLSH T1D5E78C47739511D5D4B7D23CCA4B8607E6F3BC15036297CB2168AA992F33BE22A7E704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_0cd9b6173d1279e593f05075ba6298f2_blankgrabber_cobalt-strike_coinminer_emotet_glassworm_ic.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_0cd9b6173d1279e593f05075ba6298f2_blankgrabber_cobalt-strike_coinminer_emotet_glassworm_ic.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_0cd9b6173d1279e593f05075ba6298f2_blankgrabber_cobalt-strike_coinminer_emotet_glassworm_icedid_luca-stealer_njrat_poet-rat_satacom_stealc_vidar
- Size 63.6MB
- SHA256 35a89ba86eb92a7c2184a62006cc62f8fbef17b6a120d268f23b37f14eb204eb
- MD5 0cd9b6173d1279e593f05075ba6298f2
- SHA1 a30a9d5c01293b2128ff70faadd4a5df3648f8fa
- SHA512 d381e15837827799d725f9d565325ca4fc04fb44249d3922b846780fd0b92463a5da8aebfc6e8ee0ef24888b17140a5d779780aebecd895af15985ff6452640e
- SSDEEP 786432:vccz1kZYJvlPXT3ezwLvoYA5wdFtuCfTgkqMvoWIP7Uk:vyZYJv5XLvoY4GTQUk
- TLSH T1D5E78C47739511D5D4B7D23CCA4B8607E6F3BC15036297CB2168AA992F33BE22A7E704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Loads dropped DLL
Suspicious use of SetThreadContext