General
- Target 2026-08-18_a2f3504ac5d38721e6bafb8aab42a803_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar
- Size 13.0MB
- Sample260818-y5mqvsgr2s
- SHA256 15949bb01439832f9478fec021f8676b6be67f0bf754843cf1373b6742f1e20f
- MD5 a2f3504ac5d38721e6bafb8aab42a803
- SHA1 76549fe17484e16b5f493871b2e36815bf8420bc
- SHA512 98a85983883843e36c9cc2a0af863c9c31b87cd4e1b0da7d4c73fa2b9c1cc4881c389fe2d5bf70f791d9c1c83d7358c882b98b58efbb5b334104fab887df1e89
- SSDEEP 196608:8Z9LgKDbh9EYFjTgOoWAV6MrRkvt7dex7+k:8Z9xhrHoW86M2vex7
- TLSH T150D6AE6AA2BC00E8D4BBD17CC6469617E7B1B41503705BDF16A08ABA1F63BE41F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_a2f3504ac5d38721e6bafb8aab42a803_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_a2f3504ac5d38721e6bafb8aab42a803_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a2f3504ac5d38721e6bafb8aab42a803_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_vidar
- Size 13.0MB
- SHA256 15949bb01439832f9478fec021f8676b6be67f0bf754843cf1373b6742f1e20f
- MD5 a2f3504ac5d38721e6bafb8aab42a803
- SHA1 76549fe17484e16b5f493871b2e36815bf8420bc
- SHA512 98a85983883843e36c9cc2a0af863c9c31b87cd4e1b0da7d4c73fa2b9c1cc4881c389fe2d5bf70f791d9c1c83d7358c882b98b58efbb5b334104fab887df1e89
- SSDEEP 196608:8Z9LgKDbh9EYFjTgOoWAV6MrRkvt7dex7+k:8Z9xhrHoW86M2vex7
- TLSH T150D6AE6AA2BC00E8D4BBD17CC6469617E7B1B41503705BDF16A08ABA1F63BE41F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory