General
- Target 2026-08-22_e79e61049135312983d398bd7b09892b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar
- Size 35.9MB
- Sample260822-159azacl91
- SHA256 0527aca9f1798f88c3b581780bdf4982af0667d5e882564c89bfa84f56f090e5
Score
10/10
Malware Config
Targets
-
- Target 2026-08-22_e79e61049135312983d398bd7b09892b_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_remcos_satacom_stealc_vidar
- Size 35.9MB
- SHA256 0527aca9f1798f88c3b581780bdf4982af0667d5e882564c89bfa84f56f090e5
Score10/10Modifies firewall policy service
Modifies Windows Firewall
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1