Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/05/2026, 22:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_93d194f6f0c22f3b5d92b8cfa4223f98_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_93d194f6f0c22f3b5d92b8cfa4223f98_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-28_93d194f6f0c22f3b5d92b8cfa4223f98_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
- Size 42.7MB
- Sample260528-2pg28ady6m
- SHA256 9cd7bc521c199e069b9f0712c79f201ddab6d098441c7cd78e8f9a39fb9a6760
- MD5 93d194f6f0c22f3b5d92b8cfa4223f98
- SHA1 ed4f4b9951bee702143b21e366911bfbd2a8655c
- SHA512 453b1d71714b7c5678cab76f3a61b307c433fdc9732c3ace887abb206e38350201c5febe191cd041e0308f3060a0fb19438e0f9091365d722d3fd8518bd24926
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfJ:fMguj8Q4Vfv6qFTrYG7OZRmax
- TLSH T125A79C0773E60195E5B7E2388AA65507D773B8634331CBDF329D06151FABAE09A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 2228 2026-05-28_93d194f6f0c22f3b5d92b8cfa4223f98_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-28_93d194f6f0c22f3b5d92b8cfa4223f98_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-28_93d194f6f0c22f3b5d92b8cfa4223f98_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe"1⤵
- Loads dropped DLL
PID:2228
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\pkg-OGBn3u\251abd80280b1efda1bd4622826e2251e57fa6d72118efc1239f149a1fb7d06a
- Size 122KB
- SHA256 6a5cc9c5b3e390fe08fea0de3a22248d5836cea0b26aa6a80d9447c45ec04b12
- MD5 51bd6e9752a5220c07bc56efd6c5558b
- SHA1 c9ce5bb69fff7e54bd9223df6f6e485c52e30f73
- SHA512 0f561e63e80cfb2167693ac1ce2d860c7353b9ea5cfa7c2d41c44ce0d58e54c70738432f5062e03302c289f7b0e70fddb1b9a5b82fa003f34d394fe818cde392
- SSDEEP 1536:SCcfWAsSXZjpPL+SfUJyhZTsFPV0egbhXEqsWCdk5ONWOXv2:jaXdjpP62Gd0eiXsSON3Xu
- TLSH T1EFC3D693368E6847E2C6D77CD8534544632BFA7D8830CB8A7153021EDE6FBC49EA1962
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\pkg-OGBn3u\f745c262a26e789bd92ab875007cfba9b98f0abcbc5c5606b7e98f8191726d34
- Size 134KB
- SHA256 386e7a520b143aa7b6fa1a28a0237391a938bbedd0b245733a3da3a215026a3f
- MD5 5dc8861862329b3b4122314922be3ed9
- SHA1 ee8599e12c97574ccd6520d86a4734e579b21d50
- SHA512 13c1b757078d7ce6169b2ccbaf7bcbb71447141d7e8c05238f8bade0b12ea69c922b78ed6e539e156bb2c36171d181238fc5a5fe1061d0f49746462521b64d65
- SSDEEP 3072:mje5LsMWK9BLP5oOB92Kmnf/DDN3yFQ+7j65nu:mjeFbWK7j5VBKnfrDwjInu
- TLSH T12AD34B4BB7A500BBE077C27984A74A01E772B85557619BDF03A0436A2F237D1DD3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH