General
- Target 2026-10-26_5d62a2e74683f1aa4be23de10a9352c4_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.9MB
- Sample261027-txd2jaea52
- SHA256 236a6755b48a6ff07af09eb78b624d60acf9a150435ceee76c4dd6852ad20350
- MD5 5d62a2e74683f1aa4be23de10a9352c4
- SHA1 3ce6ed329f6b9fb61391aad4ae7c04180e7ed2c7
- SHA512 a9ca927c2779d6b9b11280fa8229d01f6e032e73b5cc8762d8f8bbe25380de61252a2dcf44ffbbc30e396224e54b8d97616950c19326131fe937f423f5f7ef20
- SSDEEP 49152:0OjPWkBEGgHRtHhFAgI60X/i3klpPVVgqxdSA+tDNzDksQPBJTehAazOtFwaW40I:LpUJI6klpPVnSAnCabJ8JhOJp3pTWmn
- TLSH T14D369D1663A401E8C5B7D178CA978627E7B2BC061371D7DF02A0666A1F37BE16E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-26_5d62a2e74683f1aa4be23de10a9352c4_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_5d62a2e74683f1aa4be23de10a9352c4_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_5d62a2e74683f1aa4be23de10a9352c4_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 4.9MB
- SHA256 236a6755b48a6ff07af09eb78b624d60acf9a150435ceee76c4dd6852ad20350
- MD5 5d62a2e74683f1aa4be23de10a9352c4
- SHA1 3ce6ed329f6b9fb61391aad4ae7c04180e7ed2c7
- SHA512 a9ca927c2779d6b9b11280fa8229d01f6e032e73b5cc8762d8f8bbe25380de61252a2dcf44ffbbc30e396224e54b8d97616950c19326131fe937f423f5f7ef20
- SSDEEP 49152:0OjPWkBEGgHRtHhFAgI60X/i3klpPVVgqxdSA+tDNzDksQPBJTehAazOtFwaW40I:LpUJI6klpPVnSAnCabJ8JhOJp3pTWmn
- TLSH T14D369D1663A401E8C5B7D178CA978627E7B2BC061371D7DF02A0666A1F37BE16E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself