General
- Target 2026-08-12_5e316772b12de263adb13625c5b3cc95_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- Sample260812-kphkbasgje
- SHA256 057e4f5ead66aa2960a599a6b4e73e3b7d891f2c1130a357c24c72348aa8b877
- MD5 5e316772b12de263adb13625c5b3cc95
- SHA1 26411760ff9e0bde0ebff7f92cbc8c146747652f
- SHA512 f60874456c26e1a1b07d01f93b7f047238bbb2dbeb75fb7a650d3f051fe02eb3cbf10306794e3d1fd2640c83d6869e7a729fd7d73c79d3cefecb7bfb68c73a87
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfx:fMguj8Q4VfvhqFTrYdg
- TLSH T195978C0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_5e316772b12de263adb13625c5b3cc95_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_5e316772b12de263adb13625c5b3cc95_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_5e316772b12de263adb13625c5b3cc95_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- SHA256 057e4f5ead66aa2960a599a6b4e73e3b7d891f2c1130a357c24c72348aa8b877
- MD5 5e316772b12de263adb13625c5b3cc95
- SHA1 26411760ff9e0bde0ebff7f92cbc8c146747652f
- SHA512 f60874456c26e1a1b07d01f93b7f047238bbb2dbeb75fb7a650d3f051fe02eb3cbf10306794e3d1fd2640c83d6869e7a729fd7d73c79d3cefecb7bfb68c73a87
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfx:fMguj8Q4VfvhqFTrYdg
- TLSH T195978C0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE