General
- Target 2026-08-23_0ff83d84ecbe7405641564c553427b46_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 71.7MB
- Sample260824-vp83daap51
- SHA256 68a465322a0b1d931cd37ca5c48ccf87bcddea374441dd33ce3ad89d78913463
- MD5 0ff83d84ecbe7405641564c553427b46
- SHA1 fc102c115e2ee4ae6485b58b719a7aaba5a72775
- SHA512 7f3ff912ba44b884cd84a7d3db7f793f473f1716b8f5160cb4e444fc6ca9ad5aaf8dc2049d075e3a7de268f67704aa18069eda3b182db639d680543225320959
- SSDEEP 393216:0E5le7IKmkgrpdZXrVzG9SdRkLwjy1CcdCl0WUtHXxOK4jdbA1sZRwLP64lg/f58:0Q/HMKC8gBs8z64HQUpsMgNRa5Pj2z+
- TLSH T141F7AE15E3E80766E0BFD239C6639512C6B0B4962772D7CF1404E6992D57BE32B3A233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_0ff83d84ecbe7405641564c553427b46_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_0ff83d84ecbe7405641564c553427b46_cobalt-strike_coinminer_glassworm_hijackloader_icedid_kr.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_0ff83d84ecbe7405641564c553427b46_cobalt-strike_coinminer_glassworm_hijackloader_icedid_krakenkeylogger_njrat_olympic-destroyer_poet-rat_quasar-rat_satacom_vidar
- Size 71.7MB
- SHA256 68a465322a0b1d931cd37ca5c48ccf87bcddea374441dd33ce3ad89d78913463
- MD5 0ff83d84ecbe7405641564c553427b46
- SHA1 fc102c115e2ee4ae6485b58b719a7aaba5a72775
- SHA512 7f3ff912ba44b884cd84a7d3db7f793f473f1716b8f5160cb4e444fc6ca9ad5aaf8dc2049d075e3a7de268f67704aa18069eda3b182db639d680543225320959
- SSDEEP 393216:0E5le7IKmkgrpdZXrVzG9SdRkLwjy1CcdCl0WUtHXxOK4jdbA1sZRwLP64lg/f58:0Q/HMKC8gBs8z64HQUpsMgNRa5Pj2z+
- TLSH T141F7AE15E3E80766E0BFD239C6639512C6B0B4962772D7CF1404E6992D57BE32B3A233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL