General
- Target 2026-09-29_800c2d6e5b7862ff1c44c20d448d3705_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_xmrig
- Size 4.7MB
- Sample260930-xq2e2a1anh
- SHA256 2e94226f2910a4b5dccc3ec006547e6c2760b8cf77c55eac0f02495f48f515b9
- MD5 800c2d6e5b7862ff1c44c20d448d3705
- SHA1 c4d168cb417ed9c03a13373368dbb320d3e88829
- SHA512 b3b5d20422d2601c6beafcc1a8e6b1ee308931fe3f3f7c6d0989cbc85b2938e9dc76131cd5f6d251b9c8de290e956a6a1bac836002188f67ce2c673e0f5103ea
- SSDEEP 98304:Ev5vFtZb+i/AAOWPsZCL2dAslrR7OkFaJBvHvY9gg9N2b8GToyo3u:EB7Z0aJBvvgN+80h
- TLSH T12B369D66E2B501E4C9BBC13CC94AC903E7F178194374EBDB12A446691F236D5AE3EF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-29_800c2d6e5b7862ff1c44c20d448d3705_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_800c2d6e5b7862ff1c44c20d448d3705_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_800c2d6e5b7862ff1c44c20d448d3705_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_xmrig
- Size 4.7MB
- SHA256 2e94226f2910a4b5dccc3ec006547e6c2760b8cf77c55eac0f02495f48f515b9
- MD5 800c2d6e5b7862ff1c44c20d448d3705
- SHA1 c4d168cb417ed9c03a13373368dbb320d3e88829
- SHA512 b3b5d20422d2601c6beafcc1a8e6b1ee308931fe3f3f7c6d0989cbc85b2938e9dc76131cd5f6d251b9c8de290e956a6a1bac836002188f67ce2c673e0f5103ea
- SSDEEP 98304:Ev5vFtZb+i/AAOWPsZCL2dAslrR7OkFaJBvHvY9gg9N2b8GToyo3u:EB7Z0aJBvvgN+80h
- TLSH T12B369D66E2B501E4C9BBC13CC94AC903E7F178194374EBDB12A446691F236D5AE3EF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
XMRig Miner payload
-
Suspicious use of SetThreadContext