General
- Target 2026-08-12_bffb87c39bea4825eedfe76ff021beb2_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom
- Size 5.6MB
- Sample260812-a1e88asvfs
- SHA256 2db30c540c90fbfed78fdfc524a0b8dc3314da18a66d35385a89d4cbad7470a6
- MD5 bffb87c39bea4825eedfe76ff021beb2
- SHA1 07963d41fc9180a1968c8db3b06e8ff8ab70f274
- SHA512 14cfc13f1c51c0d80e0921cac592696eafe4324e42900707d5f7856a2c09e7fb4e9990ca7d0454ad740ff3ebf6c9169155cb487268c92dee27ac586307831f4c
- SSDEEP 49152:dhtV5c3ctA2R6Y3C86nVPBYx9/MJdjyJ3fEY1tgWdMbCaY1MKCLfjKZNRTAjtQ/q:dhtb3ChVryXHMK9NRTA+Lm
- TLSH T137469D03E2F710DAD8629174CA665162DE717CA56732EDEF1281BB299F335E08E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_bffb87c39bea4825eedfe76ff021beb2_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_bffb87c39bea4825eedfe76ff021beb2_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom
- Size 5.6MB
- SHA256 2db30c540c90fbfed78fdfc524a0b8dc3314da18a66d35385a89d4cbad7470a6
- MD5 bffb87c39bea4825eedfe76ff021beb2
- SHA1 07963d41fc9180a1968c8db3b06e8ff8ab70f274
- SHA512 14cfc13f1c51c0d80e0921cac592696eafe4324e42900707d5f7856a2c09e7fb4e9990ca7d0454ad740ff3ebf6c9169155cb487268c92dee27ac586307831f4c
- SSDEEP 49152:dhtV5c3ctA2R6Y3C86nVPBYx9/MJdjyJ3fEY1tgWdMbCaY1MKCLfjKZNRTAjtQ/q:dhtb3ChVryXHMK9NRTA+Lm
- TLSH T137469D03E2F710DAD8629174CA665162DE717CA56732EDEF1281BB299F335E08E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1