General
- Target 2026-09-12_c6d30cafc15ab10f9998c1e942aa8525_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.1MB
- Sample260912-wheevs1hnb
- SHA256 44a1bb6687565c1df93d65f1a9f691aae04a11f32a98e4f9e7f9f7c446ded4af
- MD5 c6d30cafc15ab10f9998c1e942aa8525
- SHA1 b87d779679ac54b2706183306889f6636b622d06
- SHA512 bb971923d377b3f483b76971d2efd946f49519551cc67407b60e1fa292c48aa4bd043ad7151f93a8f3b2aa7b4fbbd0b13f4db94b2673472e995b6eae1b3cbd83
- SSDEEP 196608:hQ5I1Y6lgMxsMh/vlKV4BmJsuCnuE5P5ede:ha+YWgMV/vk6BmyuCv5ye
- TLSH T109D69D5AB2B800E8D4BBD178CA565613EBB1741603709BDF17A046BA1F63BE46F3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-12_c6d30cafc15ab10f9998c1e942aa8525_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_c6d30cafc15ab10f9998c1e942aa8525_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_c6d30cafc15ab10f9998c1e942aa8525_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 13.1MB
- SHA256 44a1bb6687565c1df93d65f1a9f691aae04a11f32a98e4f9e7f9f7c446ded4af
- MD5 c6d30cafc15ab10f9998c1e942aa8525
- SHA1 b87d779679ac54b2706183306889f6636b622d06
- SHA512 bb971923d377b3f483b76971d2efd946f49519551cc67407b60e1fa292c48aa4bd043ad7151f93a8f3b2aa7b4fbbd0b13f4db94b2673472e995b6eae1b3cbd83
- SSDEEP 196608:hQ5I1Y6lgMxsMh/vlKV4BmJsuCnuE5P5ede:ha+YWgMV/vk6BmyuCv5ye
- TLSH T109D69D5AB2B800E8D4BBD178CA565613EBB1741603709BDF17A046BA1F63BE46F3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist