466a5f2ba7e68b7b5ecc487312ea9e48453d030f80aba71ec9e4867dd400d40f

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 01:10

Target
2026-07-18_2ee7da7b9a0e7d61adc44fe1c2579cbd_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Size 32.2MB
Sample260718-bjs97afs8t
SHA256 466a5f2ba7e68b7b5ecc487312ea9e48453d030f80aba71ec9e4867dd400d40f
MD5 2ee7da7b9a0e7d61adc44fe1c2579cbd
SHA1 4d5bb1b1a182681c6001f9c9197f3dfbe30baafc
SHA512 340394aed8e3920d6756716e038ebffaad663fa543f4b7e2fe49124ed1b673b7d3c7d971fc7d365a1ced1a84bc950137c22095ac2aca44426f59a32f4dca795b
SSDEEP 786432:sQvzLP2lP1dG1gxvL182Ms2TMtYIS0L10Gnr+8vnUfNgs/T0+ctrZxa:ZvzaXQQ/x1PPwgs/strZx
TLSH
T1A5774CDF16E7658DF4F8AC34C0002D1AE5607E2D9F19A5E3C176B17037399C82A6EA93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
5136	2026-07-18_2ee7da7b9a0e7d61adc44fe1c2579cbd_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
5136	2026-07-18_2ee7da7b9a0e7d61adc44fe1c2579cbd_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_2ee7da7b9a0e7d61adc44fe1c2579cbd_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_2ee7da7b9a0e7d61adc44fe1c2579cbd_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:5136