General
- Target 2026-08-18_2ded5c802f2e0b7593bc6965d31ceb57_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_ransomhub_satacom_stealc
- Size 5.6MB
- Sample260818-wye2bsaf89
- SHA256 45a0b007ee3666b2885bf9d6b301b53e58936aa6d0ec6b00f8370f6a3374521d
- MD5 2ded5c802f2e0b7593bc6965d31ceb57
- SHA1 08fead1400c5f532b09a1357e5dd448c8bd35b27
- SHA512 202247fa93dbdcaf9f9be92ad601c22f0d8cebbb8e27bd5f7a553bfd4a2d95cfc0665b42a85486a9790c3b26981ef12c676a078bcd4f4ddfab5496b7be2e9e54
- SSDEEP 49152:u3Molg5kJad3uykWI0J0b1V+u/UpXAyR1rxEj/lYxrAXBmCL/8dKSvcqZZWg5+Vp:/oUDkBHCmxRmCL/GtKAfwgkAfO
- TLSH T130467D83FBBA40E4D4BBE13855A26127F975B412033497DBD2546A6E0F32FD0AA3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_2ded5c802f2e0b7593bc6965d31ceb57_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_2ded5c802f2e0b7593bc6965d31ceb57_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Vue4exam
C2
-
http://awsvoucher.com:443/agent.ashx
Attributes
-
mesh_id
0x0F3ECD613895027914E3966633942BEFC309979D4F5197D5707EBE487BFC128081A105E934C70F0FDD6B78A50045F097
-
server_id
460435B76E2BA7A386C796547EE9B205E12F241B5E68453D37FB6DC55D7215361C5860C69962327ED15D48ACFF0C8280
-
wss
wss://awsvoucher.com:443/agent.ashx
Targets
-
- Target 2026-08-18_2ded5c802f2e0b7593bc6965d31ceb57_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_ransomhub_satacom_stealc
- Size 5.6MB
- SHA256 45a0b007ee3666b2885bf9d6b301b53e58936aa6d0ec6b00f8370f6a3374521d
- MD5 2ded5c802f2e0b7593bc6965d31ceb57
- SHA1 08fead1400c5f532b09a1357e5dd448c8bd35b27
- SHA512 202247fa93dbdcaf9f9be92ad601c22f0d8cebbb8e27bd5f7a553bfd4a2d95cfc0665b42a85486a9790c3b26981ef12c676a078bcd4f4ddfab5496b7be2e9e54
- SSDEEP 49152:u3Molg5kJad3uykWI0J0b1V+u/UpXAyR1rxEj/lYxrAXBmCL/8dKSvcqZZWg5+Vp:/oUDkBHCmxRmCL/GtKAfwgkAfO
- TLSH T130467D83FBBA40E4D4BBE13855A26127F975B412033497DBD2546A6E0F32FD0AA3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10