General
- Target 2026-08-16_bfb3105996d229a9100b35b5508a0f7e_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar
- Size 13.0MB
- Sample260816-l1sp4avwhy
- SHA256 d35216900a628912347061e412ccb8eb31820dfdfae1469c7d594b069491e7d3
- MD5 bfb3105996d229a9100b35b5508a0f7e
- SHA1 d0157b826121fbd2bb7dc91929469f0e6a7c3b47
- SHA512 b44b3d275d28db7956893ae1a8fb045fbe533bb5c0890640b23f102fed06e4d013c9e9f9944ad8f8bedb3974cac64b7a55c6180971563e6bb88dc7ae5ff038ce
- SSDEEP 196608:EUeTnfzN5Nm2NeLeJ4rJGTzkhtE6BNx/BYedfL:Ev9mzFJGnkht1N
- TLSH T178D6AE6AA2BC00E8D4BBD17CC6469617E7B1B815037067DF16A04ABA1F23BE41F7E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_bfb3105996d229a9100b35b5508a0f7e_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_bfb3105996d229a9100b35b5508a0f7e_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_bfb3105996d229a9100b35b5508a0f7e_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar
- Size 13.0MB
- SHA256 d35216900a628912347061e412ccb8eb31820dfdfae1469c7d594b069491e7d3
- MD5 bfb3105996d229a9100b35b5508a0f7e
- SHA1 d0157b826121fbd2bb7dc91929469f0e6a7c3b47
- SHA512 b44b3d275d28db7956893ae1a8fb045fbe533bb5c0890640b23f102fed06e4d013c9e9f9944ad8f8bedb3974cac64b7a55c6180971563e6bb88dc7ae5ff038ce
- SSDEEP 196608:EUeTnfzN5Nm2NeLeJ4rJGTzkhtE6BNx/BYedfL:Ev9mzFJGnkht1N
- TLSH T178D6AE6AA2BC00E8D4BBD17CC6469617E7B1B815037067DF16A04ABA1F23BE41F7E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1