General
- Target 2026-08-21_4d0b27597751bf1dbddeb17dcd0bba0f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 73.7MB
- Sample260821-cazw2sen6v
- SHA256 cf8a0a8f3281ddf117af9e279bf7144e06fa1bbf48276042bc8c8a261a370ec1
- MD5 4d0b27597751bf1dbddeb17dcd0bba0f
- SHA1 f4a85f853d75ddc63152d928f74233fca5e81aa2
- SHA512 cc05bcc4c96188844aca236747c8629f9b7bbf641e7fe05231eed894e7fa5b3f9e1796e5e67150562b78b3c02a27cc66a9ae447391999840441746775ed19885
- SSDEEP 393216:q/ic+58Z90avCIE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npHi:zuvNYURBVWd51hNQNt/ZYLy/pj8TTg0
- TLSH T15E08BE15E3E84716E52FC2BDCA638413D2F1F4971322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_4d0b27597751bf1dbddeb17dcd0bba0f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_4d0b27597751bf1dbddeb17dcd0bba0f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4d0b27597751bf1dbddeb17dcd0bba0f_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 73.7MB
- SHA256 cf8a0a8f3281ddf117af9e279bf7144e06fa1bbf48276042bc8c8a261a370ec1
- MD5 4d0b27597751bf1dbddeb17dcd0bba0f
- SHA1 f4a85f853d75ddc63152d928f74233fca5e81aa2
- SHA512 cc05bcc4c96188844aca236747c8629f9b7bbf641e7fe05231eed894e7fa5b3f9e1796e5e67150562b78b3c02a27cc66a9ae447391999840441746775ed19885
- SSDEEP 393216:q/ic+58Z90avCIE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npHi:zuvNYURBVWd51hNQNt/ZYLy/pj8TTg0
- TLSH T15E08BE15E3E84716E52FC2BDCA638413D2F1F4971322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers