2026-10-22_2e8a550da525041929b53979fce6c15b_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

General

Target
2026-10-22_2e8a550da525041929b53979fce6c15b_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar
Size 24.7MB
Sample261024-wd2dtsc16j
SHA256 573bbe771d87419696a628d35741ff2d4a55e52b95ec1e0100b753aae4eca11f
MD5 2e8a550da525041929b53979fce6c15b
SHA1 e3a649bb3f3141b311bb624a7542813290ec77ff
SHA512 d8a15e6128ced5525ddc339709b689c538dbbd8929066dc2096fbf7961e33fcb00fc764526a4cd72e50601a570d8cc3787fd4c5efb886d9e506f1bf249557fd3
SSDEEP 24576:xPdAYm0PwI6PWMJSaadJFtFt7HaS5E1Ww9gFVaKp9y1gq/iQShpD9c:rdaad781D6AT/BSh1C
TLSH
T154475B3666650CC4DC0743D3860A3C41912EE3CB1CAA1FABBCA5076F7B57192A95EFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_2e8a550da525041929b53979fce6c15b_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

2026-10-22_2e8a550da525041929b53979fce6c15b_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

.sys 24.7MB

SHA256 573bbe771d87419696a628d35741ff2d4a55e52b95ec1e0100b753aae4eca11f
MD5 2e8a550da525041929b53979fce6c15b
SHA1 e3a649bb3f3141b311bb624a7542813290ec77ff
SHA512 d8a15e6128ced5525ddc339709b689c538dbbd8929066dc2096fbf7961e33fcb00fc764526a4cd72e50601a570d8cc3787fd4c5efb886d9e506f1bf249557fd3
SSDEEP 24576:xPdAYm0PwI6PWMJSaadJFtFt7HaS5E1Ww9gFVaKp9y1gq/iQShpD9c:rdaad781D6AT/BSh1C
TLSH
T154475B3666650CC4DC0743D3860A3C41912EE3CB1CAA1FABBCA5076F7B57192A95EFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

2

Major OS version

5

Entry point

448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths