General
- Target 2026-11-11_444acd887c45007743c3548bbd86c4ab_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_magniber_njrat_satacom_sliver_stealc_vidar
- Size 9.8MB
- Sample261113-qqbfaacs2v
- SHA256 a6303f2effa208bbd047c848e19b7b1a31d9fe57c0328f8de8ee2199ba017e2f
- MD5 444acd887c45007743c3548bbd86c4ab
- SHA1 aecb2b6e7b1d0483eb170e4b7901831a8f8408b6
- SHA512 84642aefd2223cc5b16b634d01a04fdb89d9ecec80e5c2908dc780d76367f7f792f6a67d05e2b26db704ba02019906aa7b2df21b123cf9684c1707e010aed177
- SSDEEP 196608:l5LPUYwHFsk5xrlnT4um89076hPZ+C9TVQBWG:LTUYwHFsk7rBu82MKB
- TLSH T18DA69F17A2E800ECD4F7D1388A578613E7B2B84A47B197DF0690557A1F63BE19E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_444acd887c45007743c3548bbd86c4ab_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_444acd887c45007743c3548bbd86c4ab_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_444acd887c45007743c3548bbd86c4ab_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_magniber_njrat_satacom_sliver_stealc_vidar
- Size 9.8MB
- SHA256 a6303f2effa208bbd047c848e19b7b1a31d9fe57c0328f8de8ee2199ba017e2f
- MD5 444acd887c45007743c3548bbd86c4ab
- SHA1 aecb2b6e7b1d0483eb170e4b7901831a8f8408b6
- SHA512 84642aefd2223cc5b16b634d01a04fdb89d9ecec80e5c2908dc780d76367f7f792f6a67d05e2b26db704ba02019906aa7b2df21b123cf9684c1707e010aed177
- SSDEEP 196608:l5LPUYwHFsk5xrlnT4um89076hPZ+C9TVQBWG:LTUYwHFsk7rBu82MKB
- TLSH T18DA69F17A2E800ECD4F7D1388A578613E7B2B84A47B197DF0690557A1F63BE19E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1