General
- Target 2026-09-05_786d5636db98779c2e65deb7a3f19244_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom
- Size 17.8MB
- Sample260907-t68mhaaa34
- SHA256 66edf11cd8f83621cd7a21b509f4772206bd546257138bd21368458ea6afddb6
- MD5 786d5636db98779c2e65deb7a3f19244
- SHA1 f6ac1eeadf3faf316b7bcfaa7d6e309c361bd2b3
- SHA512 9244bf2f288abc5f7f870c785110fc1982e4261feb00aa638b16050044dcf4633273effb9e08011c61457e0a77162f74857859a9a44739a85c22fe51572142f7
- SSDEEP 196608:RMANcOpj6V25pe466HJWM6W+d64YC2mF25kp3hbA70dPWjQePWsu:6ANcOpjq25Y466HJWM6W+1YbU3RAo82
- TLSH T1DF17C0D969A910EDEC36C0B8C7915253FA7278590330DAE71BD48AB51F379E01E7EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_786d5636db98779c2e65deb7a3f19244_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_786d5636db98779c2e65deb7a3f19244_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_786d5636db98779c2e65deb7a3f19244_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom
- Size 17.8MB
- SHA256 66edf11cd8f83621cd7a21b509f4772206bd546257138bd21368458ea6afddb6
- MD5 786d5636db98779c2e65deb7a3f19244
- SHA1 f6ac1eeadf3faf316b7bcfaa7d6e309c361bd2b3
- SHA512 9244bf2f288abc5f7f870c785110fc1982e4261feb00aa638b16050044dcf4633273effb9e08011c61457e0a77162f74857859a9a44739a85c22fe51572142f7
- SSDEEP 196608:RMANcOpj6V25pe466HJWM6W+d64YC2mF25kp3hbA70dPWjQePWsu:6ANcOpjq25Y466HJWM6W+1YbU3RAo82
- TLSH T1DF17C0D969A910EDEC36C0B8C7915253FA7278590330DAE71BD48AB51F379E01E7EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtCreateThreadExHideFromDebugger