General
- Target 2026-08-07_c53cf45a1f0d814fecb4ae42fa1fdc6b_amadey_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_lost-door_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.0MB
- Sample260807-ygardsvyb1
- SHA256 35f1d0aea692c86b646c41b5ec97ebca7d6263ec419e1a303c271f78767d6ff0
- MD5 c53cf45a1f0d814fecb4ae42fa1fdc6b
- SHA1 d118980730360eb45f4d47d896065ff46b81551f
- SHA512 50a61f1be114849813237b8efe2ab069d0f42d7abe694d9dfa64543d51349b7a426423512e83528f2b19fd958ac07bdf863b6f31a3783776db44d9b85b980a73
- SSDEEP 98304:gbZIsIuDqAlbX1tr9UjS0ZhE5iZsyED8TEtR8nxjNi:gb7DrD1trKW0Z8iZszwTgRej
- TLSH T1BD768D5BA3A401ECE4ABD178CA569617D3B2BC51137197CF16E06A6B2F736E05E3E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_c53cf45a1f0d814fecb4ae42fa1fdc6b_amadey_blankgrabber_cobalt-strike_coinminer_glassworm_ic.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_c53cf45a1f0d814fecb4ae42fa1fdc6b_amadey_blankgrabber_cobalt-strike_coinminer_glassworm_ic.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c53cf45a1f0d814fecb4ae42fa1fdc6b_amadey_blankgrabber_cobalt-strike_coinminer_glassworm_icedid_lost-door_luca-stealer_njrat_satacom_stealc_vidar
- Size 7.0MB
- SHA256 35f1d0aea692c86b646c41b5ec97ebca7d6263ec419e1a303c271f78767d6ff0
- MD5 c53cf45a1f0d814fecb4ae42fa1fdc6b
- SHA1 d118980730360eb45f4d47d896065ff46b81551f
- SHA512 50a61f1be114849813237b8efe2ab069d0f42d7abe694d9dfa64543d51349b7a426423512e83528f2b19fd958ac07bdf863b6f31a3783776db44d9b85b980a73
- SSDEEP 98304:gbZIsIuDqAlbX1tr9UjS0ZhE5iZsyED8TEtR8nxjNi:gb7DrD1trKW0Z8iZszwTgRej
- TLSH T1BD768D5BA3A401ECE4ABD178CA569617D3B2BC51137197CF16E06A6B2F736E05E3E300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1