General

  • Target
    2026-08-24_d700b462092dbb0e87252a431eb415f7_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
  • Size 60.4MB
  • Sample260824-3lapeafd72
  • SHA256 8ef91cbb3ec1eb479ce00c4661e19f6e9e7fb3be97a02be63608cbcd63c51280
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-24_d700b462092dbb0e87252a431eb415f7_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
    • Size 60.4MB
    • SHA256 8ef91cbb3ec1eb479ce00c4661e19f6e9e7fb3be97a02be63608cbcd63c51280
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Overlord RAT

    • Family: Overlord

      Overlord is an open-source Windows RAT written in Golang.

    • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

    • Modifies Windows Firewall

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks