General
- Target 2026-09-08_0896770387ca69b8225cf8cc1b6cba29_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.2MB
- Sample260910-jk67fahp8y
- SHA256 53201c2a9e0b289b7d7717d68402b0c518e2481f4849bf2e83449b921ebd39b9
- MD5 0896770387ca69b8225cf8cc1b6cba29
- SHA1 ebe6b8704fb8ba51f1d65508434c6e13bc8b7507
- SHA512 92b6dc90fd2a1b1f2785d0df1ecb22450479d8f2eff967ec7a410ba4d43f0e4a9e4d1fd19e09df81f1609e03d804600d97cff68a2102f22b0b52112d0d28b869
- SSDEEP 49152:3Gtlq0/VwASOTBIU6i0aGCHceZo4pMPKJi1oYaitV2TXa2nU3O97d6UPBm/v9mS9:42+V+4i1oYKKiAOxSAa9IblmHix8EVy
- TLSH T14A269D16A65901FCD5B7D138C6CA5623E7B17C1603B18BCB02E4BA661F33AE16E3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_0896770387ca69b8225cf8cc1b6cba29_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_0896770387ca69b8225cf8cc1b6cba29_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.2MB
- SHA256 53201c2a9e0b289b7d7717d68402b0c518e2481f4849bf2e83449b921ebd39b9
- MD5 0896770387ca69b8225cf8cc1b6cba29
- SHA1 ebe6b8704fb8ba51f1d65508434c6e13bc8b7507
- SHA512 92b6dc90fd2a1b1f2785d0df1ecb22450479d8f2eff967ec7a410ba4d43f0e4a9e4d1fd19e09df81f1609e03d804600d97cff68a2102f22b0b52112d0d28b869
- SSDEEP 49152:3Gtlq0/VwASOTBIU6i0aGCHceZo4pMPKJi1oYaitV2TXa2nU3O97d6UPBm/v9mS9:42+V+4i1oYKKiAOxSAa9IblmHix8EVy
- TLSH T14A269D16A65901FCD5B7D138C6CA5623E7B17C1603B18BCB02E4BA661F33AE16E3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1