Analysis
- max time kernel
149s - max time network
93s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 16:57
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-11_71b567eeb60f09bd2c4e520de4630535_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_71b567eeb60f09bd2c4e520de4630535_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-11_71b567eeb60f09bd2c4e520de4630535_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
- Size 60.7MB
- Sample260511-vgnfpsfs3t
- SHA256 47c83c4d13f2ead85f87b052896e7530eb28d3d5d8bd6173f761ec01e8554dbf
- MD5 71b567eeb60f09bd2c4e520de4630535
- SHA1 4db9491d3663995c64155c7fa4d6b051dd3b3f36
- SHA512 db3e9eaeff95b7d51e3f9475b264fcf8b88c98b44e868f2cdb84376cc088216d3068a5aa654865178bd975074cd7d2ae75e9873b4a46ceca6fee0d01b40b74a1
- SSDEEP 1572864:Dsjyneqpom+EbtVMn7DNUcKg9P+CEhYW8UUSAEO:oSrb8NxBrFBEO
- TLSH T154D702D564A400FCEAA6C138C68656A7E2E13C460B744DCB2FC1F9551F33AD4DABAF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral2/memory/5100-0-0x00007FF765EF0000-0x00007FF769BC2000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL