General
- Target 2026-08-28_e46d699701d991ab656e785ce4b5f0f9_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc
- Size 7.1MB
- Sample260828-hwvr4scb42
- SHA256 66f7fa102a68ae670c0cdb7dd92e1eeb07911a97dfc81805ba250d245b32fd03
- MD5 e46d699701d991ab656e785ce4b5f0f9
- SHA1 972f80f93c00be428e73ed6b48e702954c871b69
- SHA512 9b3efa3a32b35c1e8cf2b0f54d016affac91c13f4f3ec0aa4016efea9faa703568894510fb3cad2e3b6b31a740a3de1cc5b2b17532e24072e8cfea68183f8669
- SSDEEP 98304:scklljCVjYM/fh6ImzzJoDfuBcMv+A73XAk:scpxYMHh6ImzD+Fk
- TLSH T1E9769C51FAEB40F5D543C5344867922FE73178064335DBD7C6A08EA6EE27AE11E3B222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-28_e46d699701d991ab656e785ce4b5f0f9_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-s.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_e46d699701d991ab656e785ce4b5f0f9_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-s.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_e46d699701d991ab656e785ce4b5f0f9_cobalt-strike_coinminer_cryptbot_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc
- Size 7.1MB
- SHA256 66f7fa102a68ae670c0cdb7dd92e1eeb07911a97dfc81805ba250d245b32fd03
- MD5 e46d699701d991ab656e785ce4b5f0f9
- SHA1 972f80f93c00be428e73ed6b48e702954c871b69
- SHA512 9b3efa3a32b35c1e8cf2b0f54d016affac91c13f4f3ec0aa4016efea9faa703568894510fb3cad2e3b6b31a740a3de1cc5b2b17532e24072e8cfea68183f8669
- SSDEEP 98304:scklljCVjYM/fh6ImzzJoDfuBcMv+A73XAk:scpxYMHh6ImzD+Fk
- TLSH T1E9769C51FAEB40F5D543C5344867922FE73178064335DBD7C6A08EA6EE27AE11E3B222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE