General

  • Target
    2026-09-01_001cd430ca5bfb91851ee1363d48ab0f_cobalt-strike_coinminer_glassworm_pos_satacom_stealc_vidar_win-beast
  • Size 31.0MB
  • Sample260903-vx752sscpc
  • SHA256 ebd4f11201af2cc58936a0668fa9b5fbae94899bdfdebefd174c99371e57ac44
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-09-01_001cd430ca5bfb91851ee1363d48ab0f_cobalt-strike_coinminer_glassworm_pos_satacom_stealc_vidar_win-beast
    .exe 31.0MB

2026-09-01_001cd430ca5bfb91851ee1363d48ab0f_cobalt-strike_coinminer_glassworm_pos_satacom_stealc_vidar_win-beast

  • IMPHASH b09c18f618399a62855e94457e82e022
  • SHA256 ebd4f11201af2cc58936a0668fa9b5fbae94899bdfdebefd174c99371e57ac44
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
51:0a:d2:43:dd:8b:c6:90:25:55:b7:ac:78:43:99:6c:71:39:d5:26:de:b9:8a:ad:15:89:89:a9:31:4d:7c:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4559077,CN=Now.gg\, INC,O=Now.gg\, INC,L=Campbell,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
6
Entry point
13746236
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\code\app-player\out\winnt\x64\Release\hd\Source\plr\Release\HD-Player.pdb