General
- Target 2026-08-15_12dd4654f4990d4a20e40bc93bd83fa3_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 35.9MB
- Sample260815-cavmbsdk7x
- SHA256 17ceb6c8a700129de303dd5603fafb420d4674e3bc6deb9a59597f28b4efc9b1
- MD5 12dd4654f4990d4a20e40bc93bd83fa3
- SHA1 798842d5a88b3926121746043c115d6353037f5f
- SHA512 06308e828f469ae9cd2e7cb90cf353fe3404e38d3be1c41ddb63bc84ccabf3d97b53d975cc325a4765cdc2cba84de2dfc975a7e8faf07e441d9d8c160e525892
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfa:fMguj8Q4VfvBqFTrYN
- TLSH T1D3878B0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_12dd4654f4990d4a20e40bc93bd83fa3_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_12dd4654f4990d4a20e40bc93bd83fa3_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_12dd4654f4990d4a20e40bc93bd83fa3_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 35.9MB
- SHA256 17ceb6c8a700129de303dd5603fafb420d4674e3bc6deb9a59597f28b4efc9b1
- MD5 12dd4654f4990d4a20e40bc93bd83fa3
- SHA1 798842d5a88b3926121746043c115d6353037f5f
- SHA512 06308e828f469ae9cd2e7cb90cf353fe3404e38d3be1c41ddb63bc84ccabf3d97b53d975cc325a4765cdc2cba84de2dfc975a7e8faf07e441d9d8c160e525892
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfa:fMguj8Q4VfvBqFTrYN
- TLSH T1D3878B0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.