General
- Target 2026-09-13_13b783c7eb7d0467e78c04818a9a8da7_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 77.7MB
- Sample260913-v8zytabl2w
- SHA256 a59770a8b321f9ba3a694dcd6e3b683019504b84cd5f279a1724f86a84d2632e
- MD5 13b783c7eb7d0467e78c04818a9a8da7
- SHA1 45760dcfbb556af80249be38d9ae049b54699b00
- SHA512 100ab74feec917ed7cc3dbdeb270986374fbe6bd95ca6a75ef85869710a136c4dcb3ec9f17553bcd848e0ac06c2569809ae901d6a835efdb59e4d8a78c467916
- SSDEEP 786432:onYl0ziQlREsyGa4CWD83XvxOtx2O1dPgHNaZlt+6UtLVbsS:opzDREtWDaFOcHNaLt+6eLVbsS
- TLSH T1A0088C42A7FA0485F9F7AA3499E69213D677BC063F3085CB324C172A1F736E09976721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_13b783c7eb7d0467e78c04818a9a8da7_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_13b783c7eb7d0467e78c04818a9a8da7_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar_zxxz
- Size 77.7MB
- SHA256 a59770a8b321f9ba3a694dcd6e3b683019504b84cd5f279a1724f86a84d2632e
- MD5 13b783c7eb7d0467e78c04818a9a8da7
- SHA1 45760dcfbb556af80249be38d9ae049b54699b00
- SHA512 100ab74feec917ed7cc3dbdeb270986374fbe6bd95ca6a75ef85869710a136c4dcb3ec9f17553bcd848e0ac06c2569809ae901d6a835efdb59e4d8a78c467916
- SSDEEP 786432:onYl0ziQlREsyGa4CWD83XvxOtx2O1dPgHNaZlt+6UtLVbsS:opzDREtWDaFOcHNaLt+6eLVbsS
- TLSH T1A0088C42A7FA0485F9F7AA3499E69213D677BC063F3085CB324C172A1F736E09976721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.