5b7bb52500144feaad2aab8098f2aa4db35ff5824aa8b7d38ec44f15e9b81c0f

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/07/2026, 01:38

Target
2026-07-19_3a0d65a4d5e019b02444293e1319f766_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Size 32.2MB
Sample260720-b2e6aaes5x
SHA256 5b7bb52500144feaad2aab8098f2aa4db35ff5824aa8b7d38ec44f15e9b81c0f
MD5 3a0d65a4d5e019b02444293e1319f766
SHA1 c7399cae28f332c6db02033b1296d93cad629ef9
SHA512 793a1eef3d66d7bf5eeb8876f89dc125cb6591bdff63877fedbb5b96ef87fb9f37d9206b099e6c03d0b7913e4774902b99d64a5e2e239b7824fec0b5f1c02250
SSDEEP 786432:sQvzLP2lP1dG1gxvL182Ms2TMtYIS0L10Gnr+8vnUfNgs/T0+ctrZxa:ZvzaXQQ/x1PPwgs/strZx
TLSH
T1E5774CDF16E7658DF4F8AC34C0002D1AE5607E2D9F19A5E3C176B17037399C82A6EA93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
744	2026-07-19_3a0d65a4d5e019b02444293e1319f766_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
744	2026-07-19_3a0d65a4d5e019b02444293e1319f766_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-19_3a0d65a4d5e019b02444293e1319f766_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-19_3a0d65a4d5e019b02444293e1319f766_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:744