General
- Target 2026-08-21_55b74cbd8adbca4432929bf8c957a32f_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_pos_satacom_stealc_vidar_zxxz
- Size 74.3MB
- Sample260821-e6542sw1et
- SHA256 cf7519c26251f1e054a8c0fd58849afac16c729f0e2aef8e9d78bb9e9029c235
- MD5 55b74cbd8adbca4432929bf8c957a32f
- SHA1 c41413758890b217f62f96046c3461228e17fa61
- SHA512 c4765d741d34008984dc4c82554d884f99f0a362466d043e0c18dd20de38f913035480bb27c33c1296ac19a0828d517177965665886abe8729b157f760b20f89
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfS:fMguj8Q4VfvqqFTrY73NLBAcF6
- TLSH T18D08BE06B3E505A3D6A792348A9B0207E372B4635730DBDB719C43582FAB7E48A7F750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
11 signatures
Behavioral task
behavioral1
Sample
2026-08-21_55b74cbd8adbca4432929bf8c957a32f_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_55b74cbd8adbca4432929bf8c957a32f_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_55b74cbd8adbca4432929bf8c957a32f_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_pos_satacom_stealc_vidar_zxxz
- Size 74.3MB
- SHA256 cf7519c26251f1e054a8c0fd58849afac16c729f0e2aef8e9d78bb9e9029c235
- MD5 55b74cbd8adbca4432929bf8c957a32f
- SHA1 c41413758890b217f62f96046c3461228e17fa61
- SHA512 c4765d741d34008984dc4c82554d884f99f0a362466d043e0c18dd20de38f913035480bb27c33c1296ac19a0828d517177965665886abe8729b157f760b20f89
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfS:fMguj8Q4VfvqqFTrY73NLBAcF6
- TLSH T18D08BE06B3E505A3D6A792348A9B0207E372B4635730DBDB719C43582FAB7E48A7F750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.