General
- Target 2026-08-19_3aa685215eb5eb5395debfaba13251e1_cobalt-strike_coinminer_glassworm_icedid_satacom
- Size 5.2MB
- Sample260819-gp54tszvdt
- SHA256 b8934ec4f3f15a3ad12443eae90336002a7f1d2fa6f4a394fd09a66eeb8feea4
- MD5 3aa685215eb5eb5395debfaba13251e1
- SHA1 4d21ef67b5f2a558d5f66b238ce858a6b39d608c
- SHA512 6f9b00f76f6061ae668bc88bcab81ba440f2ed7d5f81a993ac169c447423de142b4cfc85c5623a43c155c05082ad1a99ebee10abe83048dd00fc109118c253aa
- SSDEEP 49152:tOjPW8bTKuk25cIU6idMxHhltwqr8lH2d96eX0qgbba4UO4HgJjeTe7ARw/wWFOR:cT+SlppgbW9AJ+davy/cAS/zIr
- TLSH T166468D66529800ECD276E0FCCE465A03D7B2F4571370AFFB0AA5D5620F17AE45A3AF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_3aa685215eb5eb5395debfaba13251e1_cobalt-strike_coinminer_glassworm_icedid_satacom.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_3aa685215eb5eb5395debfaba13251e1_cobalt-strike_coinminer_glassworm_icedid_satacom.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_3aa685215eb5eb5395debfaba13251e1_cobalt-strike_coinminer_glassworm_icedid_satacom
- Size 5.2MB
- SHA256 b8934ec4f3f15a3ad12443eae90336002a7f1d2fa6f4a394fd09a66eeb8feea4
- MD5 3aa685215eb5eb5395debfaba13251e1
- SHA1 4d21ef67b5f2a558d5f66b238ce858a6b39d608c
- SHA512 6f9b00f76f6061ae668bc88bcab81ba440f2ed7d5f81a993ac169c447423de142b4cfc85c5623a43c155c05082ad1a99ebee10abe83048dd00fc109118c253aa
- SSDEEP 49152:tOjPW8bTKuk25cIU6idMxHhltwqr8lH2d96eX0qgbba4UO4HgJjeTe7ARw/wWFOR:cT+SlppgbW9AJ+davy/cAS/zIr
- TLSH T166468D66529800ECD276E0FCCE465A03D7B2F4571370AFFB0AA5D5620F17AE45A3AF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.