Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 05:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
- Size 36.9MB
- Sample260723-gnmk4aen3x
- SHA256 97b1a7662c988707f96c05b55b005dd7db3d06a610e803d4c63ba4ef083523f2
- MD5 5a87621e949c16b795e915624db2eabf
- SHA1 9f99693536a7aacfd31109327c5694b460c527c5
- SHA512 e17ea3fc71486e97ff6d39b8a0ecf7ee9113d15794449cb8b17315ee437353febc73876d27716a3077c37979123bc787bab2585932c462419780fecb65831aca
- SSDEEP 393216:6G8RPGaZ4AwP/9eMUXGa7e6d24VQaxH1pfuCOGCZP7upAyx:ejvo4K4H1luCOG8CWyx
- TLSH T1DA874992BA960ADCE49FE2799EE942B1FE333446433112C746D845451E8F7F08E3BB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 3528 2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe 3528 2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3528 2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-23_5a87621e949c16b795e915624db2eabf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:3528
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.3.3-snapshot\x64\glfw.dll
- Size 484KB
- SHA256 affa7e54eb0dedce4a5721c327c1a16035edbbd039cd402e08107d6d2d55eb1a
- MD5 8cabdbe3d67546771b02af5d42073cfe
- SHA1 2e19147110b9872a52814956bab151a7aa80ce58
- SHA512 b7f46feef779e5772fc7711fda601fdda6ee4bf41d4fb87735a0b8fdc5fdbbdab23ba1760989e15d66cf9ba65409933cbce858eda169d04f13f401198245ad1f
- SSDEEP 6144:QHi9k9IQYWWS4JJbzxazY4czAHxOoThkaQo3:QHivQYWX0bzxazY4/3
- TLSH T100B4B61967B2060EDF2B4433C6CFF9219477B04C3FDBA59E7E9019E47E25BA140A9B24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.3.3-snapshot\x64\lwjgl.dll
- Size 468KB
- SHA256 a39adf52947fafd954c2a86ce031abb8c59825f7ee50337ac8c41e4280abe82d
- MD5 d8ea3886d9f59b514bfa5b24ab69c0ab
- SHA1 2bf57942dff5360889f0e89c58d5acdc54e5f1ea
- SHA512 ba8af0415c7b0454dd8bdccf78ed59da3bb5cc5f631dd060d3cd0eaf74d8f55d7531248b6b8a995ba5b672dc0386d3fa198e8c761f2e1cc0304da0dc029bf29e
- SSDEEP 6144:p997Xkbij3eAMVXiDiA36PFpIiThjnC/smb72NI:p997Xkbij37MVy+A3+J4bS+
- TLSH T132A4D931DE12C68CDCEB723960531001EA7778651B1216CB27ABDA5BB11ABF093F6F25
- MD5 SHA1 SHA512 SSDEEP TLSH