Analysis
- max time kernel
148s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/06/2026, 04:30
Behavioral task
behavioral1
Sample
2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target 2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
- Size 5.2MB
- Sample260630-e44hfaew4t
- SHA256 71c4cdb6adb7fa03c4581df21a4893929b2eb6a17c7535f3dd82574a0e0c091b
- MD5 b711da6dd0ef2e5e58978223efd77974
- SHA1 ec21d82830b0af56716d609024984a8f932b54e0
- SHA512 51445cde9489bb54950c71d814556a45de533e06ed834511944adff349d21448e27632629197c1db7f509f8e24df4745174e7552f72779ac6302da95f61ae6d2
- SSDEEP 98304:NBMhsaOY7X6noYc4gVJAXLEaEeKAFCTkjZhzEc+4WRDn9nr6vjMvEXr3oSFf5:Nrk7Iwc+BJnV8jMv+U4f5
- TLSH T16B46AE65B2A501E4C8BBC07C8A1B9517F7F2B8194370ABDF16B492A91F237D15E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeLockMemoryPrivilege 5692 2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe Token: SeLockMemoryPrivilege 5692 2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5692 2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-29_b711da6dd0ef2e5e58978223efd77974_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5692