2026-10-04_e3940cac03a2c480043b342d6f103474_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-04_e3940cac03a2c480043b342d6f103474_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar
Size 56.7MB
Sample261004-3st2mazarf
SHA256 84bf57e721846903f123fabea9b481eef1e7ac37a5cd1ae92aa8f094e3a7c7cd
MD5 e3940cac03a2c480043b342d6f103474
SHA1 c9659d28dc76c9a59255dfd462f60d514154a884
SHA512 3051ababb67658053e06e445fa9e7abeb68ac02000d2a5f901b0041a4ad9e979e8d7f3833acde60eb15ff4e8afabafacb22f6d1ad748bdd2c09d01d01290bf9a
SSDEEP 1572864:lM+3crTkGjx/ktkjmgJopBhxGmWP3hrscC1:O+3c3kG1/kwDqpBLWJrL
TLSH
T1EAD7336AF16300F8E8E7A138C9D5DF16A7A2F844075046DFA2E0CA372F636D55E38791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-04_e3940cac03a2c480043b342d6f103474_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-10-04_e3940cac03a2c480043b342d6f103474_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar

.exe 56.7MB
sva.pyc

.ps1 49KB

2026-10-04_e3940cac03a2c480043b342d6f103474_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH a327dafd898643f0f5f6902acf35b94a
SHA256 84bf57e721846903f123fabea9b481eef1e7ac37a5cd1ae92aa8f094e3a7c7cd
MD5 e3940cac03a2c480043b342d6f103474
SHA1 c9659d28dc76c9a59255dfd462f60d514154a884
SHA512 3051ababb67658053e06e445fa9e7abeb68ac02000d2a5f901b0041a4ad9e979e8d7f3833acde60eb15ff4e8afabafacb22f6d1ad748bdd2c09d01d01290bf9a
SSDEEP 1572864:lM+3crTkGjx/ktkjmgJopBhxGmWP3hrscC1:O+3c3kG1/kwDqpBLWJrL
TLSH
T1EAD7336AF16300F8E8E7A138C9D5DF16A7A2F844075046DFA2E0CA372F636D55E38791
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

59196

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Hopper\Downloads\Nueva carpeta (13)\x64\Release\BR.Mods.Launcher.pdb

kernel32

CreateProcessA OpenProcess GetLocalTime GetTickCount GetSystemDirectoryA GetSystemDirectoryW VirtualAllocEx VirtualProtectEx VirtualQueryEx ReadProcessMemory WriteProcessMemory VirtualFreeEx AssignProcessToJobObject TerminateJobObject SetInformationJobObject FreeLibrary GetModuleFileNameA GetModuleHandleW GetProcAddress LoadResource LockResource SizeofResource FindResourceW LoadLibraryA LoadLibraryW QueryFullProcessImageNameA FindResourceA MoveFileA CreateRemoteThread SetConsoleCtrlHandler CreateToolhelp32Snapshot Process32First Process32Next Module32First Module32Next K32EnumProcessModules K32GetModuleBaseNameA IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter CreateEventW CreateThread GetExitCodeProcess TerminateProcess ExitProcess GetCurrentProcessId GetCurrentProcess Sleep CreateMutexA WaitForSingleObject GetProcessHeap HeapFree HeapAlloc SetLastError GetLastError CloseHandle OutputDebugStringA GetTempFileNameA GetTempPathA WriteFile SetFileAttributesA RemoveDirectoryA ReadFile GetFileSize GetFileAttributesA FindNextFileA FindFirstFileA WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FindClose DeleteFileA CreateFileA CreateDirectoryA CreateJobObjectA

user32

GetIconInfo CreateIconIndirect LoadCursorA MessageBoxA

gdi32

CreateCompatibleDC CreateBitmap DeleteDC GetObjectW CreateDIBSection SetBitmapBits GetDIBits DeleteObject

advapi32

CreateServiceW AdjustTokenPrivileges LookupPrivilegeValueA ChangeServiceConfigW CloseServiceHandle ControlService StartServiceW QueryServiceStatusEx QueryServiceConfigW OpenServiceW OpenServiceA OpenSCManagerW OpenSCManagerA EnumServicesStatusExA DeleteService OpenProcessToken

shell32

ShellExecuteA SHCreateDirectoryExA

urlmon

URLDownloadToFileA

ws2_32

socket select ntohs WSAStartup closesocket connect ioctlsocket htons inet_addr WSACleanup

iphlpapi

GetExtendedUdpTable GetExtendedTcpTable

winhttp

WinHttpQueryOption WinHttpSetOption WinHttpSetTimeouts WinHttpReadData WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpConnect WinHttpOpenRequest WinHttpOpen WinHttpCloseHandle

msvcp140

?_Xlength_error@std@@YAXPEBD@Z _Xtime_get_ticks _Query_perf_counter _Query_perf_frequency _Thrd_detach _Thrd_join _Thrd_sleep _Thrd_id _Cnd_do_broadcast_at_thread_exit ?_Throw_C_error@std@@YAXH@Z ?_Throw_Cpp_error@std@@YAXH@Z

wininet

DeleteUrlCacheEntryA

winmm

PlaySoundA

crypt32

CertGetCertificateContextProperty CertFreeCertificateContext

vcruntime140

memcmp __C_specific_handler memcpy memmove memset __current_exception __current_exception_context __std_terminate strrchr __std_exception_copy __std_exception_destroy _CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type terminate _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _crt_atexit __p___argc _cexit _c_exit _register_thread_local_exe_atexit_callback _beginthreadex system _register_onexit_function _invalid_parameter_noinfo_noreturn _initialize_onexit_table __p___argv

api-ms-win-crt-string-l1-1-0

_stricmp strncat _strnicmp wcsncmp _wcsicmp

api-ms-win-crt-heap-l1-1-0

_callnewh calloc malloc _set_new_mode free

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vswprintf_s __stdio_common_vsnprintf_s __stdio_common_vsprintf __stdio_common_vfprintf fopen fflush fclose __p__commode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-04_e3940cac03a2c480043b342d6f103474_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_vidar

kernel32

user32

gdi32

advapi32

shell32

urlmon

ws2_32

iphlpapi

winhttp

msvcp140

wininet

winmm

crypt32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic

sva.pyc