General
- Target 2026-08-07_4a797efcd576cd0dae16a0ca3432694d_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom
- Size 14.7MB
- Sample260807-grcv3aycke
- SHA256 b662f183c0a02bd8bf031c3733ed7a2a53c800329c449d50e9af569dbfacf752
- MD5 4a797efcd576cd0dae16a0ca3432694d
- SHA1 056904cf6049b61adf4af31bb677c75ffd9abca8
- SHA512 598967c3969337a7fa7ddc2a065bdf7187057a3b4b7d515dfdc29747823f155ec213e052544223613ed5d2ab39059027488003d23503cac0d2dd617e91cfe7aa
- SSDEEP 393216:TFFB10qrPV1oxppiwq3SgOhbf86U/h3yoI:RFBrW068R3yoI
- TLSH T185F6CFA965FC00ECE832C078C366A663F77178180770A7EB5AE485B51F379E51E7A702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_4a797efcd576cd0dae16a0ca3432694d_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_4a797efcd576cd0dae16a0ca3432694d_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_4a797efcd576cd0dae16a0ca3432694d_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom
- Size 14.7MB
- SHA256 b662f183c0a02bd8bf031c3733ed7a2a53c800329c449d50e9af569dbfacf752
- MD5 4a797efcd576cd0dae16a0ca3432694d
- SHA1 056904cf6049b61adf4af31bb677c75ffd9abca8
- SHA512 598967c3969337a7fa7ddc2a065bdf7187057a3b4b7d515dfdc29747823f155ec213e052544223613ed5d2ab39059027488003d23503cac0d2dd617e91cfe7aa
- SSDEEP 393216:TFFB10qrPV1oxppiwq3SgOhbf86U/h3yoI:RFBrW068R3yoI
- TLSH T185F6CFA965FC00ECE832C078C366A663F77178180770A7EB5AE485B51F379E51E7A702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtCreateThreadExHideFromDebugger