2026-09-12_1c4d195887cb55add8e2805a0b6dac23_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar

General

Target
2026-09-12_1c4d195887cb55add8e2805a0b6dac23_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar
Size 27.4MB
Sample260913-f8xfcssbme
SHA256 947160ae1825ba1872b2e20bcd8dd10b4a82755078da4320ef629d0792a2a7ad
MD5 1c4d195887cb55add8e2805a0b6dac23
SHA1 f501ffff2921b64a340af6dda721829c779849a6
SHA512 bff07eca3ea6bd335cb57425c275d90c23759d96b3b9c194c9cfcbbe93d0c4b99b99046e2d89b71e4a2c01d74f253a043f610a6f930f654b7dc7e9d8e24ebe31
SSDEEP 98304:YClvSIfRLyyAqu8ntZZffAOHLT0N2LlMJvLfMs7GXhjxTOe1:NlvSIfR9AiZNf9QuCDfMs7GRP
TLSH
T145570816F705CCD7FA16C23548DEDBA06732FCF086A5870733A8671A6FAE2889ED1451
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-12_1c4d195887cb55add8e2805a0b6dac23_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar

File Explorer

2026-09-12_1c4d195887cb55add8e2805a0b6dac23_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar

.exe 27.4MB

2026-09-12_1c4d195887cb55add8e2805a0b6dac23_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar

IMPHASH c329cfdce996b315359260e710fbdc76
SHA256 947160ae1825ba1872b2e20bcd8dd10b4a82755078da4320ef629d0792a2a7ad
MD5 1c4d195887cb55add8e2805a0b6dac23
SHA1 f501ffff2921b64a340af6dda721829c779849a6
SHA512 bff07eca3ea6bd335cb57425c275d90c23759d96b3b9c194c9cfcbbe93d0c4b99b99046e2d89b71e4a2c01d74f253a043f610a6f930f654b7dc7e9d8e24ebe31
SSDEEP 98304:YClvSIfRLyyAqu8ntZZffAOHLT0N2LlMJvLfMs7GXhjxTOe1:NlvSIfR9AiZNf9QuCDfMs7GRP
TLSH
T145570816F705CCD7FA16C23548DEDBA06732FCF086A5870733A8671A6FAE2889ED1451
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

42864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

UnregisterTraceGuids RegisterTraceGuidsW GetTraceEnableLevel GetTraceEnableFlags GetTraceLoggerHandle TraceMessage EventWriteTransfer RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges RegCloseKey EventUnregister EventRegister OpenThreadToken OpenProcessToken GetLengthSid CheckTokenMembership FreeSid CopySid AllocateAndInitializeSid

kernel32

CloseHandle IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError SetLastError GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentThread GetCurrentThreadId HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime FreeLibrary GetProcAddress LoadLibraryExW CompareStringW LCMapStringW IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW MultiByteToWideChar ExitProcess GetModuleHandleW GetModuleHandleExW GetProcessHeap WideCharToMultiByte HeapSize HeapReAlloc GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead EncodePointer RaiseException InitializeCriticalSectionEx CallNamedPipeW InitializeProcThreadAttributeList CreateToolhelp32Snapshot UpdateProcThreadAttribute Process32NextW Process32FirstW DeleteProcThreadAttributeList WaitNamedPipeW VirtualQuery FlushFileBuffers GetProcessId GetProcessTimes GetCommandLineW GetThreadTimes GetModuleFileNameW GetEnvironmentVariableW GetSystemDirectoryW HeapSetInformation CreateProcessW GetExitCodeProcess FindNextFileW WriteFile SetEnvironmentVariableW FindClose WaitForSingleObject CreateFileW GetFileAttributesW OpenProcess CreateEventW SetEvent WaitForSingleObjectEx ResetEvent SetFilePointerEx QueryFullProcessImageNameW VirtualLock GetStdHandle GetCommandLineA FindFirstFileExW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetConsoleOutputCP GetConsoleMode WriteConsoleW VirtualAlloc

rpcrt4

UuidCreate

ntdll

RtlNtStatusToDosError RtlGetVersion RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-12_1c4d195887cb55add8e2805a0b6dac23_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar

advapi32

kernel32

rpcrt4

ntdll

generic