f4831ceac0fef0273a4404cd907183c026bc8e5e4150ea9549bebd7af8e261f2

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 01:14

Target
2026-07-19_778fbb683a338fd777eafbe893a68559_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Size 32.2MB
Sample260720-blql3sdx6s
SHA256 f4831ceac0fef0273a4404cd907183c026bc8e5e4150ea9549bebd7af8e261f2
MD5 778fbb683a338fd777eafbe893a68559
SHA1 1f73abb40e4c03b52f4c3bdc4ec069f14bc4db0f
SHA512 c1c430bec004d96b331dd6efb2d8fbce3bfc3b1606a52514fda90e4f5a989b4ce7978138adad9a89d31da59bd1383a02212ad0b6721cb5edbef085a3956fc5e9
SSDEEP 786432:sQvzLP2lP1dG1gxvL182Ms2TMtYIS0L10Gnr+8vnUfNgs/T0+ctrZxa:ZvzaXQQ/x1PPwgs/strZx
TLSH
T12A774CDF16E7658DF4F8AC34C0002D1AE5607E2D9F19A5E3C176B17037399C82A6EA93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
5056	2026-07-19_778fbb683a338fd777eafbe893a68559_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
5056	2026-07-19_778fbb683a338fd777eafbe893a68559_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-19_778fbb683a338fd777eafbe893a68559_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-19_778fbb683a338fd777eafbe893a68559_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:5056