General
- Target 2026-09-28_d8b645756db34bcb3aaf91893e48a491_cobalt-strike_coinminer_glassworm_megazord_njrat_satacom_vidar
- Size 11.9MB
- Sample260928-nf32faad99
- SHA256 65209dd9351149dd9273b9ec6c28527a049b93a9a1711b1f240d39c68d4b9593
- MD5 d8b645756db34bcb3aaf91893e48a491
- SHA1 00e218a343b41bbe1a7872e739650859e98557a0
- SHA512 2fbbe1059a8168954494548c7aa6962175203538d3829932959040dcd646bd2702155352a93e7632dd438211c41b216b9b38f582dd5193d2c1c213d2e76900a7
- SSDEEP 196608:En2g4J2RybiRHEy7u3GX5HJkNWHxABwR:ER4J2Rybih37u3GX5ZHqCR
- TLSH T147C67C5763F510D8D1BBD2788A3B8112DAB27C590734A7DF06A089662F63FE09E7D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-28_d8b645756db34bcb3aaf91893e48a491_cobalt-strike_coinminer_glassworm_megazord_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_d8b645756db34bcb3aaf91893e48a491_cobalt-strike_coinminer_glassworm_megazord_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_d8b645756db34bcb3aaf91893e48a491_cobalt-strike_coinminer_glassworm_megazord_njrat_satacom_vidar
- Size 11.9MB
- SHA256 65209dd9351149dd9273b9ec6c28527a049b93a9a1711b1f240d39c68d4b9593
- MD5 d8b645756db34bcb3aaf91893e48a491
- SHA1 00e218a343b41bbe1a7872e739650859e98557a0
- SHA512 2fbbe1059a8168954494548c7aa6962175203538d3829932959040dcd646bd2702155352a93e7632dd438211c41b216b9b38f582dd5193d2c1c213d2e76900a7
- SSDEEP 196608:En2g4J2RybiRHEy7u3GX5HJkNWHxABwR:ER4J2Rybih37u3GX5ZHqCR
- TLSH T147C67C5763F510D8D1BBD2788A3B8112DAB27C590734A7DF06A089662F63FE09E7D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of SetThreadContext