db0d779948214cf761011d154c3a5da36df20394fa01a9fc798f1dc39fe9d183

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 01:25

Target
2026-07-05_85554b5218fe2ec82e99d1367ef13d5c_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
Size 43.3MB
Sample260705-btc1ysby2p
SHA256 db0d779948214cf761011d154c3a5da36df20394fa01a9fc798f1dc39fe9d183
MD5 85554b5218fe2ec82e99d1367ef13d5c
SHA1 035054d1275fbf892fab43171387498716c37a88
SHA512 91720643225647b6f9a9e478938dcc8bf7da853287d8fa0a1bac99a99e567541f3e66e53048fd7489a55d2eacb79e518ada61bc94afff96758c25537c49d0bf6
SSDEEP 196608:c7FCDjI2ZhxdulB75g+6ZNFfASSkwS9eAJORb2LykKRTFZM2h2XXI7ZEV:cBMjQB7L6/FfASSkUAJORaLykKnEXga
TLSH
T18DA72953F9290CD5E9AEC831CAA655237B313C6A573023DB1F60B6146F7EBD066BA310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3808	2026-07-05_85554b5218fe2ec82e99d1367ef13d5c_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
3808	2026-07-05_85554b5218fe2ec82e99d1367ef13d5c_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
3808	2026-07-05_85554b5218fe2ec82e99d1367ef13d5c_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
3808	2026-07-05_85554b5218fe2ec82e99d1367ef13d5c_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-05_85554b5218fe2ec82e99d1367ef13d5c_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-05_85554b5218fe2ec82e99d1367ef13d5c_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3808