General
- Target 2026-11-03_93e85b9f101abe2cd42955ea0befec05_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 3.7MB
- Sample261104-qwd4cs11ct
- SHA256 d3945a3b14ee0b7cf3775f8515a1c5a08b1f10533ee6e5cfbb9bccb352172f8c
- MD5 93e85b9f101abe2cd42955ea0befec05
- SHA1 b4ac76b3d2d387e9a86b5d24c78444f46f02e3a3
- SHA512 08757d87a4eb4a197eca084db3c67f402534454b8d2b391ff096e0ad24026d0d13d8a5fc624d22edfb03d9a543f99cc3db980ed95f98d078ddbeabda75eace15
- SSDEEP 49152:WAna/MloRuTxHorZ984+oEqEJ+RuDdh4AUIYkJSmsoFjT2piPqfVgqFXoBFX:ntZCDhuALQJS5QgFfVg
- TLSH T1E0069D56E7B800E8D9BBD138C9564517E7F2B8141362DBCF07A04AAA1F23BE51E3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_93e85b9f101abe2cd42955ea0befec05_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_93e85b9f101abe2cd42955ea0befec05_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_93e85b9f101abe2cd42955ea0befec05_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
- Size 3.7MB
- SHA256 d3945a3b14ee0b7cf3775f8515a1c5a08b1f10533ee6e5cfbb9bccb352172f8c
- MD5 93e85b9f101abe2cd42955ea0befec05
- SHA1 b4ac76b3d2d387e9a86b5d24c78444f46f02e3a3
- SHA512 08757d87a4eb4a197eca084db3c67f402534454b8d2b391ff096e0ad24026d0d13d8a5fc624d22edfb03d9a543f99cc3db980ed95f98d078ddbeabda75eace15
- SSDEEP 49152:WAna/MloRuTxHorZ984+oEqEJ+RuDdh4AUIYkJSmsoFjT2piPqfVgqFXoBFX:ntZCDhuALQJS5QgFfVg
- TLSH T1E0069D56E7B800E8D9BBD138C9564517E7F2B8141362DBCF07A04AAA1F23BE51E3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Modifies file permissions
-
Suspicious use of SetThreadContext