Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 04:35
Behavioral task
behavioral1
Sample
2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
- Size 39.5MB
- Sample260714-e71kysgw6t
- SHA256 fc9fe836fc8d42b651350f017113b725d90b10fc6891c8082ba1d384d5a6033b
- MD5 0a15a276373677f7fd6908ad03bccb1b
- SHA1 522d94f7991fb3c75bd1ec77b72049185a8e2e14
- SHA512 12dce7aa3e9e21b9f51a224ee4a6c60d05a9be0f9ea971d06efb79118914d59003ee9f2aafe1b3d8792013eb153911f6e1d928a78972526f87e6f5759ae7730f
- SSDEEP 393216:qpoMX/BFDRn5kd4eqJbJMKg+DVMr1PJvKXPDaF9W37KrKdBOLfI6mnfJo7kh:qFYK/5dBOL4C7k
- TLSH T1E2978C5372B50185E5B3D238C9AB4213E772B8568730DBCF315C43A92F77AE58A3A760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString 2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-14_0a15a276373677f7fd6908ad03bccb1b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe"1⤵
- Checks processor information in registry
PID:5048