General
- Target 2026-09-08_04ac6e9e36ca737acafbf3fbf7397079_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
- Size 41.4MB
- Sample260908-ytxfxsxtby
- SHA256 fb56ddeccff7ddd09b7f2b0d32942cc315ea2ae30fefb47c867798fef7b83949
- MD5 04ac6e9e36ca737acafbf3fbf7397079
- SHA1 13cbc1d227babc4fa798a4ca69be57e64479eb65
- SHA512 e5b82156c2673cb9f776e39fd7ec69b8fcc5a799a365346b008ad96bd351689ab7388b4cab9850a42cf55d7037497fbb0e6b4eeffb238d28355853c2d20be01e
- SSDEEP 786432:s6ov53y1oHAPUGAfM0gU/Xj/2C12xOjMtlUY:sh3y1oHAPUGAfM0gUvL2CYgMvUY
- TLSH T167978B0773E60195E5B3D2388AA75203D773B8275730CBDF329D06552FABAD09A7A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_04ac6e9e36ca737acafbf3fbf7397079_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_04ac6e9e36ca737acafbf3fbf7397079_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
- Size 41.4MB
- SHA256 fb56ddeccff7ddd09b7f2b0d32942cc315ea2ae30fefb47c867798fef7b83949
- MD5 04ac6e9e36ca737acafbf3fbf7397079
- SHA1 13cbc1d227babc4fa798a4ca69be57e64479eb65
- SHA512 e5b82156c2673cb9f776e39fd7ec69b8fcc5a799a365346b008ad96bd351689ab7388b4cab9850a42cf55d7037497fbb0e6b4eeffb238d28355853c2d20be01e
- SSDEEP 786432:s6ov53y1oHAPUGAfM0gU/Xj/2C12xOjMtlUY:sh3y1oHAPUGAfM0gUvL2CYgMvUY
- TLSH T167978B0773E60195E5B3D2388AA75203D773B8275730CBDF329D06552FABAD09A7A720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.