General

  • Target
    2026-09-30_24c01c5933ee63a8da39852a6495977f_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
  • Size 11.6MB
  • Sample261001-vxll2sha83
  • SHA256 53667ed89ee15b3bbf238c4479657866bb595eb1b2069a0054b8ccc4dac4c9d4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-09-30_24c01c5933ee63a8da39852a6495977f_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
    .exe 11.6MB

2026-09-30_24c01c5933ee63a8da39852a6495977f_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar

  • IMPHASH 831f6d3cb5b41e2a8bf1e9044fdafc5d
  • SHA256 53667ed89ee15b3bbf238c4479657866bb595eb1b2069a0054b8ccc4dac4c9d4
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
5984272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\JENKINS\workspace\N_MBAMService\bin\x64\Release\MBAMService.pdb