General
- Target 2026-08-17_04af46ee77b2174c2377fb40f4d97bf6_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- Sample260818-a6tc2atana
- SHA256 af883e0d122d3904772a7a7c1a438b50d5d0bbbb882df5f7d089ed737e3d9dcf
- MD5 04af46ee77b2174c2377fb40f4d97bf6
- SHA1 292448cf0d18c9179e6c8375a3209e4d9c9119a4
- SHA512 1fb5b315ce7d753431b243f27787f61a1257968789ddf9424cd5b95ed559da4963522469accddb71d66464d9f93cfae403d6dc4a8afac606a1e87a902283c93a
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfc:fMguj8Q4VfvYqFTrYaC/C
- TLSH T10F978C0773E60095E9B7D1388AA64507D773B8678331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_04af46ee77b2174c2377fb40f4d97bf6_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_04af46ee77b2174c2377fb40f4d97bf6_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_04af46ee77b2174c2377fb40f4d97bf6_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- SHA256 af883e0d122d3904772a7a7c1a438b50d5d0bbbb882df5f7d089ed737e3d9dcf
- MD5 04af46ee77b2174c2377fb40f4d97bf6
- SHA1 292448cf0d18c9179e6c8375a3209e4d9c9119a4
- SHA512 1fb5b315ce7d753431b243f27787f61a1257968789ddf9424cd5b95ed559da4963522469accddb71d66464d9f93cfae403d6dc4a8afac606a1e87a902283c93a
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfc:fMguj8Q4VfvYqFTrYaC/C
- TLSH T10F978C0773E60095E9B7D1388AA64507D773B8678331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE