General
- Target 2026-10-26_60b66bff0dfc2d94d4ff49f5f3915f87_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_qakbot_satacom_stealc
- Size 5.6MB
- Sample261027-tlfqzset6w
- SHA256 746292c46cb19896440a03a5caf2af65bd266b50eac8d1421d4bac710d9a3fd8
- MD5 60b66bff0dfc2d94d4ff49f5f3915f87
- SHA1 1d35cb7a101f4378c341063d49900f0615e2f82d
- SHA512 42c4ea0b2ef93241a502aba2f8991288725e3a10966be66a0369e770e016780fea9e5c4e127d5a24bbb67914d8146032a6ff5e0d4365140c18a6cd25041a5e97
- SSDEEP 98304:6g+0RFf83aVOmD1tKfKthDnQx//Ly5lT:3RRFEqVOmD1tKfqhDnQdTy5N
- TLSH T102469E66A7A850ECD477C178C6568627EBF27C0513719BCB02A0967A1F33AE11F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_60b66bff0dfc2d94d4ff49f5f3915f87_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_60b66bff0dfc2d94d4ff49f5f3915f87_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_60b66bff0dfc2d94d4ff49f5f3915f87_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_qakbot_satacom_stealc
- Size 5.6MB
- SHA256 746292c46cb19896440a03a5caf2af65bd266b50eac8d1421d4bac710d9a3fd8
- MD5 60b66bff0dfc2d94d4ff49f5f3915f87
- SHA1 1d35cb7a101f4378c341063d49900f0615e2f82d
- SHA512 42c4ea0b2ef93241a502aba2f8991288725e3a10966be66a0369e770e016780fea9e5c4e127d5a24bbb67914d8146032a6ff5e0d4365140c18a6cd25041a5e97
- SSDEEP 98304:6g+0RFf83aVOmD1tKfKthDnQx//Ly5lT:3RRFEqVOmD1tKfqhDnQdTy5N
- TLSH T102469E66A7A850ECD477C178C6568627EBF27C0513719BCB02A0967A1F33AE11F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Loads dropped DLL
-
Suspicious use of SetThreadContext