General
- Target 2026-08-10_2d02efde6f71ada38282b4aad9779d5a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 105.9MB
- Sample260810-hfd5escp81
- SHA256 3e6032291b4616459c0fa950b2c474e96a991f82c8b9922cfd48a7ed1105fcda
- MD5 2d02efde6f71ada38282b4aad9779d5a
- SHA1 2edb1b7b73b2dd6fbdc7272ae5bbb9160d560121
- SHA512 46e557e2d75a9f02c5f0122f1c130ff344f5fb002f42e7c030060fc7a08e93df89e2cbffaef3602cc1ea06f4a899d0e0cfa0934439d5a3300028d98cde7d2771
- SSDEEP 1572864:dMoCm/cXwJM1Yyl9TXkm+PCf6ka7vAXM7XEQVQnarKYL8ENroT73w:q4cXwT29TXkPaSkyvAc7UpnarrhoTzw
- TLSH T15638F10673E601A6E5B7A2384A9B1103E773B4675731CACB325C03542FABBE46D7B724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_2d02efde6f71ada38282b4aad9779d5a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_2d02efde6f71ada38282b4aad9779d5a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2d02efde6f71ada38282b4aad9779d5a_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 105.9MB
- SHA256 3e6032291b4616459c0fa950b2c474e96a991f82c8b9922cfd48a7ed1105fcda
- MD5 2d02efde6f71ada38282b4aad9779d5a
- SHA1 2edb1b7b73b2dd6fbdc7272ae5bbb9160d560121
- SHA512 46e557e2d75a9f02c5f0122f1c130ff344f5fb002f42e7c030060fc7a08e93df89e2cbffaef3602cc1ea06f4a899d0e0cfa0934439d5a3300028d98cde7d2771
- SSDEEP 1572864:dMoCm/cXwJM1Yyl9TXkm+PCf6ka7vAXM7XEQVQnarKYL8ENroT73w:q4cXwT29TXkPaSkyvAc7UpnarrhoTzw
- TLSH T15638F10673E601A6E5B7A2384A9B1103E773B4675731CACB325C03542FABBE46D7B724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL