General
- Target 2026-08-15_97ce9220c54169cfa126b87034a4d224_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- Sample260815-bpph7awzhs
- SHA256 9446d6c7ebc14d69bb9f893c02b166a27d55cf8ddd6484db9cb91a5e1af56ce0
- MD5 97ce9220c54169cfa126b87034a4d224
- SHA1 85b960d432ea54814fe21fdfdefa1b03e172998a
- SHA512 1dc5e6d075114897eb6bc5639fdc7b27c972d133e1759254f00579aedaad8a728fc3eab96136e9d8521fffab419725a9a4d3bee40980742c3d12256b8cc1cf7a
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf9:fMguj8Q4VfvWqFTrY7KZ2
- TLSH T13E978C0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_97ce9220c54169cfa126b87034a4d224_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_97ce9220c54169cfa126b87034a4d224_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_97ce9220c54169cfa126b87034a4d224_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- SHA256 9446d6c7ebc14d69bb9f893c02b166a27d55cf8ddd6484db9cb91a5e1af56ce0
- MD5 97ce9220c54169cfa126b87034a4d224
- SHA1 85b960d432ea54814fe21fdfdefa1b03e172998a
- SHA512 1dc5e6d075114897eb6bc5639fdc7b27c972d133e1759254f00579aedaad8a728fc3eab96136e9d8521fffab419725a9a4d3bee40980742c3d12256b8cc1cf7a
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf9:fMguj8Q4VfvWqFTrY7KZ2
- TLSH T13E978C0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE