0f29c5056c8e3c34911f15bb0e53818e25dab29430a5dbaf286e99860d8c2297

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 03:53

Target
2026-05-27_bbc8a258a176d94bbdea2fee7f4f8600_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe
Size 10.6MB
Sample260527-efl89ahs7x
SHA256 0f29c5056c8e3c34911f15bb0e53818e25dab29430a5dbaf286e99860d8c2297
MD5 bbc8a258a176d94bbdea2fee7f4f8600
SHA1 182871141c85b53e0edcb1970e1d2b3d5790b3c4
SHA512 a3c7ad02e83a95155a1a61a6be0b637aedd00671d89a5fcb598aff047a90e49d93e009443277c18b93f3a3f27e220c51eb697619e3f776900f12f0f9f82fa941
SSDEEP 98304:hSixDmT+nsDyPq7VZ82QXd3RogQYhY3HU6+VPkqnWpUUjhtygTjf:hSKDJq7r82YNRogQYhErwc/j
TLSH
T14BB6AF66B6A501ACD87BC038C6578B13EBB1B8961730A7EF01A456792F77BE0173E350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4876	2026-05-27_bbc8a258a176d94bbdea2fee7f4f8600_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe
4876	2026-05-27_bbc8a258a176d94bbdea2fee7f4f8600_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-27_bbc8a258a176d94bbdea2fee7f4f8600_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-27_bbc8a258a176d94bbdea2fee7f4f8600_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4876