General
- Target 2026-08-23_fe0ece7334c1febd6a257d859f840699_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 73.7MB
- Sample260823-rh5jtsae33
- SHA256 86b35ff774f28637f1460c8762d7348abb66995985d897930df5e0036fccab23
- MD5 fe0ece7334c1febd6a257d859f840699
- SHA1 497b6e03aae0e4d9b3f950a4c72d580467df4585
- SHA512 300cb6cb90b704b64281e125616d74747251647920d423936f8ffe7c70237f19c7b5877de845af24cffdddf76326d51a377a0c30ed096f05e16da1b7a09169b0
- SSDEEP 393216:4/ic+58Z90av8IE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npH/:puv7YURBVWd51hNQNt/ZYLy/pj8TTgd
- TLSH T1C608BE15E3E84716E52FC2BDCA638413D2F1F4971322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_fe0ece7334c1febd6a257d859f840699_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_fe0ece7334c1febd6a257d859f840699_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_fe0ece7334c1febd6a257d859f840699_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 73.7MB
- SHA256 86b35ff774f28637f1460c8762d7348abb66995985d897930df5e0036fccab23
- MD5 fe0ece7334c1febd6a257d859f840699
- SHA1 497b6e03aae0e4d9b3f950a4c72d580467df4585
- SHA512 300cb6cb90b704b64281e125616d74747251647920d423936f8ffe7c70237f19c7b5877de845af24cffdddf76326d51a377a0c30ed096f05e16da1b7a09169b0
- SSDEEP 393216:4/ic+58Z90av8IE/0ZlFwMDdJvhSDELtRhpolsVWd5JbnFZeMNQNt/ZCFLy/npH/:puv7YURBVWd51hNQNt/ZYLy/pj8TTgd
- TLSH T1C608BE15E3E84716E52FC2BDCA638413D2F1F4971322D6CF0454E6992F63BD2AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers