General
- Target 2026-09-10_9b0a5b4266929dc1a2e401405fe6b2e0_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.0MB
- Sample260910-qb2zpaxwaz
- SHA256 62e1714f23b89c45336e83ca107228e2efe3b3b065988f4ffee4f9bcda050e37
- MD5 9b0a5b4266929dc1a2e401405fe6b2e0
- SHA1 c6052f4c19335968885ad29adcecdec91f2d8c7f
- SHA512 2d7d3f6d3b3c07b785260c3621f9bbecfe0e144e81b825f69ff4c9570d886ab4ea8a8d70a5fc327abe888c48e592baba5cda1afbb0561f10270dce17b98071f6
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfA:fMguj8Q4VfvYqFTrY1S1r
- TLSH T18B878B0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_9b0a5b4266929dc1a2e401405fe6b2e0_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_9b0a5b4266929dc1a2e401405fe6b2e0_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_9b0a5b4266929dc1a2e401405fe6b2e0_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar_zxxz
- Size 36.0MB
- SHA256 62e1714f23b89c45336e83ca107228e2efe3b3b065988f4ffee4f9bcda050e37
- MD5 9b0a5b4266929dc1a2e401405fe6b2e0
- SHA1 c6052f4c19335968885ad29adcecdec91f2d8c7f
- SHA512 2d7d3f6d3b3c07b785260c3621f9bbecfe0e144e81b825f69ff4c9570d886ab4ea8a8d70a5fc327abe888c48e592baba5cda1afbb0561f10270dce17b98071f6
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfA:fMguj8Q4VfvYqFTrY1S1r
- TLSH T18B878B0773E60095E9B7D1388AA65507D773B8638331CBDF329D06152FABAD09A7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.