General
- Target 2026-08-21_65b24da3216e1cfa6c15851c24c4b761_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_pos_satacom_stealc_vidar_zxxz
- Size 74.3MB
- Sample260822-q36rysfb74
- SHA256 8782fe84002ced4baed62bdf5bee2a5a3ec7d2835807ad8fdaa16b8db83eb432
- MD5 65b24da3216e1cfa6c15851c24c4b761
- SHA1 bca874836e2f48920059754605dc83b37fb117e9
- SHA512 da96f83f587b8f7da104155299b9e9695c7db924237ace20c9faa8c0af1ffbab1fc50ca8920a6597694e8169ea860e9326bdda3a8edf35eb3865538cbc899bbc
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfL:fMguj8Q4VfvsqFTrYt2NoM0cnM
- TLSH T11E08BE06B3E505A3D5A392348A9B0207E372B4635734DBDB719C43582FAB7E48A7F760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
11 signatures
Behavioral task
behavioral1
Sample
2026-08-21_65b24da3216e1cfa6c15851c24c4b761_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_65b24da3216e1cfa6c15851c24c4b761_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_65b24da3216e1cfa6c15851c24c4b761_avaddon_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_pos_satacom_stealc_vidar_zxxz
- Size 74.3MB
- SHA256 8782fe84002ced4baed62bdf5bee2a5a3ec7d2835807ad8fdaa16b8db83eb432
- MD5 65b24da3216e1cfa6c15851c24c4b761
- SHA1 bca874836e2f48920059754605dc83b37fb117e9
- SHA512 da96f83f587b8f7da104155299b9e9695c7db924237ace20c9faa8c0af1ffbab1fc50ca8920a6597694e8169ea860e9326bdda3a8edf35eb3865538cbc899bbc
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfL:fMguj8Q4VfvsqFTrYt2NoM0cnM
- TLSH T11E08BE06B3E505A3D5A392348A9B0207E372B4635734DBDB719C43582FAB7E48A7F760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.