General
- Target 2026-08-17_5974048f094607fde20afa02df06ed81_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- Sample260818-aqd86ssfme
- SHA256 feda4429e9bf4bf1df61c47a645e6c19df6cc1055ca01a1afc5311d973f96320
- MD5 5974048f094607fde20afa02df06ed81
- SHA1 c7eadd77b8dab7c13135f3b2dc7b2b77f47e3c23
- SHA512 f643b0bcac6fbe39bbd48d0eee526403cc608b050e58d0e38ee5efb1f74e4c513ec546b5d3b5cdae05f5dd6d5a9c3bb5776804b6db6477666fe9d4302a9a64aa
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfW:fMguj8Q4VfvSqFTrYM67m
- TLSH T173978C0773E600D5E9B7D1388AA64507D7B3B8674331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_5974048f094607fde20afa02df06ed81_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_5974048f094607fde20afa02df06ed81_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 38.1MB
- SHA256 feda4429e9bf4bf1df61c47a645e6c19df6cc1055ca01a1afc5311d973f96320
- MD5 5974048f094607fde20afa02df06ed81
- SHA1 c7eadd77b8dab7c13135f3b2dc7b2b77f47e3c23
- SHA512 f643b0bcac6fbe39bbd48d0eee526403cc608b050e58d0e38ee5efb1f74e4c513ec546b5d3b5cdae05f5dd6d5a9c3bb5776804b6db6477666fe9d4302a9a64aa
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfW:fMguj8Q4VfvSqFTrYM67m
- TLSH T173978C0773E600D5E9B7D1388AA64507D7B3B8674331CADF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE