General
- Target 2026-08-14_60b7ade5c79a32fa280b370461e8bc2f_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_pos_satacom_vidar
- Size 32.3MB
- Sample260814-mcb8wahn8v
- SHA256 a6d16cc405237714a1135780d079f7abb52aec46e59775220112524bfb7fdb9e
- MD5 60b7ade5c79a32fa280b370461e8bc2f
- SHA1 73d50730a65256d823b672759bbee539c2aadac6
- SHA512 a98964b07acf1109be6bb4abfdcabae89c813a87dfa6066da56cdc41e44b25f33c327cc0018fef12c5292490230c3b06a26965829b77abf8dbd5e2ad23914cb5
- SSDEEP 393216:KJPjKq/IZrs2NuDYV0LP1CPwDvt3uFhC4Sx8Fe9XbhpIw7uKeeQx9l2Jw:KJPjK1bVSrDeh02
- TLSH T175779E0272684055E9B6E27CC857464BE7B1BC12372193DB2069F65D3FB3BE25A7E308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-14_60b7ade5c79a32fa280b370461e8bc2f_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_60b7ade5c79a32fa280b370461e8bc2f_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_60b7ade5c79a32fa280b370461e8bc2f_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_pos_satacom_vidar
- Size 32.3MB
- SHA256 a6d16cc405237714a1135780d079f7abb52aec46e59775220112524bfb7fdb9e
- MD5 60b7ade5c79a32fa280b370461e8bc2f
- SHA1 73d50730a65256d823b672759bbee539c2aadac6
- SHA512 a98964b07acf1109be6bb4abfdcabae89c813a87dfa6066da56cdc41e44b25f33c327cc0018fef12c5292490230c3b06a26965829b77abf8dbd5e2ad23914cb5
- SSDEEP 393216:KJPjKq/IZrs2NuDYV0LP1CPwDvt3uFhC4Sx8Fe9XbhpIw7uKeeQx9l2Jw:KJPjK1bVSrDeh02
- TLSH T175779E0272684055E9B6E27CC857464BE7B1BC12372193DB2069F65D3FB3BE25A7E308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing virtualization MAC addresses
-
Loads dropped DLL