General
- Target 2026-08-12_aced5f482226454931463e2607683027_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_utkonos_vidar_zxxz
- Size 78.6MB
- Sample260812-p63n2axdrb
- SHA256 0bc8d244591a48cfbc72c09bbda23663511d47b51da50d140f962d307a53a2fc
- MD5 aced5f482226454931463e2607683027
- SHA1 b755f350482ebe010e5fc903d8356e9854f70003
- SHA512 292213d9ac22956a7e4ca1580acb5ceb4463298a6720e16d3273028f8e18729f4fe5f174ca2e879e2444b19aaf352a4229ba6abdc6e283de203e6eeccaae56ed
- SSDEEP 393216:PscebTm6j1AwWqiygocy4SbIsTJPfxE/4cEhvsNGVtZBU9P21HTlwjqQ2aY6C+7j:PaDCVYjsU5ZyMaNJLSdmgLvxOtxd
- TLSH T1CA087B42A3EA04D5E9FB9A3489E65213D673BC063F3086DF324C176A1F736E09976721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_aced5f482226454931463e2607683027_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_aced5f482226454931463e2607683027_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_aced5f482226454931463e2607683027_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_utkonos_vidar_zxxz
- Size 78.6MB
- SHA256 0bc8d244591a48cfbc72c09bbda23663511d47b51da50d140f962d307a53a2fc
- MD5 aced5f482226454931463e2607683027
- SHA1 b755f350482ebe010e5fc903d8356e9854f70003
- SHA512 292213d9ac22956a7e4ca1580acb5ceb4463298a6720e16d3273028f8e18729f4fe5f174ca2e879e2444b19aaf352a4229ba6abdc6e283de203e6eeccaae56ed
- SSDEEP 393216:PscebTm6j1AwWqiygocy4SbIsTJPfxE/4cEhvsNGVtZBU9P21HTlwjqQ2aY6C+7j:PaDCVYjsU5ZyMaNJLSdmgLvxOtxd
- TLSH T1CA087B42A3EA04D5E9FB9A3489E65213D673BC063F3086DF324C176A1F736E09976721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.