General
- Target 2026-09-09_ce40b4dd004b3dcc2ccbedd0151d5a11_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_revil_stealc_vidar
- Size 3.0MB
- Sample260910-2911tsxcpb
- SHA256 e855969a18eee01b95ac7cf4dd31c4db6ceb33b811118e25f95e126097bba553
- MD5 ce40b4dd004b3dcc2ccbedd0151d5a11
- SHA1 b7f9c9d6e09cf162d1f99a681b5e5257682ae571
- SHA512 045d86c3b0824a1da5171b686c48adb88f6f0ab7bd801b824597c40d42810a3a3bf24186bbc3b0de55f42d5d79889e01faec52f42e79904b91ae57eb00081a1c
- SSDEEP 49152:kAk8NDDYO8JoB8BdWYwBrVwASOwGtlqq23l6K0BY2LIU6iTofR8RLqbGXP0E:pxDOWT3/KR+UfRc5XP0E
- TLSH T12DE5AD16B24501FEE426C17896465032F6717C86AB727EEB46A4FB352D7BAF02F38704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_ce40b4dd004b3dcc2ccbedd0151d5a11_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_revil_stealc_vidar.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_ce40b4dd004b3dcc2ccbedd0151d5a11_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_revil_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_ce40b4dd004b3dcc2ccbedd0151d5a11_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_revil_stealc_vidar
- Size 3.0MB
- SHA256 e855969a18eee01b95ac7cf4dd31c4db6ceb33b811118e25f95e126097bba553
- MD5 ce40b4dd004b3dcc2ccbedd0151d5a11
- SHA1 b7f9c9d6e09cf162d1f99a681b5e5257682ae571
- SHA512 045d86c3b0824a1da5171b686c48adb88f6f0ab7bd801b824597c40d42810a3a3bf24186bbc3b0de55f42d5d79889e01faec52f42e79904b91ae57eb00081a1c
- SSDEEP 49152:kAk8NDDYO8JoB8BdWYwBrVwASOwGtlqq23l6K0BY2LIU6iTofR8RLqbGXP0E:pxDOWT3/KR+UfRc5XP0E
- TLSH T12DE5AD16B24501FEE426C17896465032F6717C86AB727EEB46A4FB352D7BAF02F38704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1