General
- Target 2026-08-21_fa507f16a324469e1a5bc9f9aae31c36_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 79.3MB
- Sample260821-fgf93axtdt
- SHA256 58d4fcb5aa8f969a6d7215fe71e93827a472f90049c77d79052bedde17f2bf5d
- MD5 fa507f16a324469e1a5bc9f9aae31c36
- SHA1 4e076f2bfb96b0739b9ddfdf7cb24fab89850955
- SHA512 29a2e5adfc82b0ca6233d5e2d45db323c5f4250d6c6707ad33e26e9357d41e46979ec5e429485bddbd992f9d3cc65d2418089da865cc992a94d997992a39d28f
- SSDEEP 786432:ZuvfYURBVWd51hNQNt/ZYLy/pj8TTgs919CvcOn:ZiYURSvrNQNt/ZLjJs919Cvcq
- TLSH T19C08BE15E3E84716E52FC2BDC6638413D2F1F4972322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_fa507f16a324469e1a5bc9f9aae31c36_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_fa507f16a324469e1a5bc9f9aae31c36_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_fa507f16a324469e1a5bc9f9aae31c36_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 79.3MB
- SHA256 58d4fcb5aa8f969a6d7215fe71e93827a472f90049c77d79052bedde17f2bf5d
- MD5 fa507f16a324469e1a5bc9f9aae31c36
- SHA1 4e076f2bfb96b0739b9ddfdf7cb24fab89850955
- SHA512 29a2e5adfc82b0ca6233d5e2d45db323c5f4250d6c6707ad33e26e9357d41e46979ec5e429485bddbd992f9d3cc65d2418089da865cc992a94d997992a39d28f
- SSDEEP 786432:ZuvfYURBVWd51hNQNt/ZYLy/pj8TTgs919CvcOn:ZiYURSvrNQNt/ZLjJs919Cvcq
- TLSH T19C08BE15E3E84716E52FC2BDC6638413D2F1F4972322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers