General
- Target 2026-09-03_d7fa208e28d217737b07d42c01456a94_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 73.1MB
- Sample260903-1bcpxawfka
- SHA256 6f14a18740ad5e267b8ea18265527b39df44d3ca7d3cac8318385ddd11c92e3f
- MD5 d7fa208e28d217737b07d42c01456a94
- SHA1 d5fbc011b2723a6836e7602a6f122fbebc900303
- SHA512 1208ffdb9b22753512a469dd09a287266be90eeaf2d2e659cb1716ec8b89a9af8c7e58bade01eda576ec2ae9d8cd373e7836cc4a97a10f83bd3a229e002383e2
- SSDEEP 393216:ib2mZpyFn+NbB3zqtqx/idsWrD95SrndGbNfPWC6py1G09S2WGGohcag1nNu+2Ut:iCOYGZe6GaGlyE7ap5Z0vKvxOOxlD/
- TLSH T178F75B42A7EA04C5F9FB9A3489E65213D673BC063F3085DF3248176A1F736E09976722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_d7fa208e28d217737b07d42c01456a94_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_d7fa208e28d217737b07d42c01456a94_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_i.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_d7fa208e28d217737b07d42c01456a94_blankgrabber_cobalt-strike_coinminer_funksec_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 73.1MB
- SHA256 6f14a18740ad5e267b8ea18265527b39df44d3ca7d3cac8318385ddd11c92e3f
- MD5 d7fa208e28d217737b07d42c01456a94
- SHA1 d5fbc011b2723a6836e7602a6f122fbebc900303
- SHA512 1208ffdb9b22753512a469dd09a287266be90eeaf2d2e659cb1716ec8b89a9af8c7e58bade01eda576ec2ae9d8cd373e7836cc4a97a10f83bd3a229e002383e2
- SSDEEP 393216:ib2mZpyFn+NbB3zqtqx/idsWrD95SrndGbNfPWC6py1G09S2WGGohcag1nNu+2Ut:iCOYGZe6GaGlyE7ap5Z0vKvxOOxlD/
- TLSH T178F75B42A7EA04C5F9FB9A3489E65213D673BC063F3085DF3248176A1F736E09976722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.