56d6735dae4b5d1fc2cb90bc6ce652dd9a26fb4162db99905f4900417b942fe4

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 01:24

Target
2026-07-23_0c47bef7be5699a950dad9627601a370_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Size 32.2MB
Sample260724-bsd7ma1cja
SHA256 56d6735dae4b5d1fc2cb90bc6ce652dd9a26fb4162db99905f4900417b942fe4
MD5 0c47bef7be5699a950dad9627601a370
SHA1 c6bbb5b73490b196b64f6a02bfc0c9247472c834
SHA512 0db634b9f45c6bdda28540ad150eb44c6156bf0dc26a1b532e90dc4b028993415072566d7fc17415117879e80649c1886e08eebe38bcde086fda13d91e6f3ed2
SSDEEP 786432:sQvzLP2lP1dG1gxvL182Ms2TMtYIS0L10Gnr+8vnUfNgs/T0+ctrZxa:ZvzaXQQ/x1PPwgs/strZx
TLSH
T17C774CDF16E7658DF4F8AC34C0002D1AE5607E2D9F19A5E3C176B17037399C82A6EA93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4100	2026-07-23_0c47bef7be5699a950dad9627601a370_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
4100	2026-07-23_0c47bef7be5699a950dad9627601a370_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-23_0c47bef7be5699a950dad9627601a370_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-23_0c47bef7be5699a950dad9627601a370_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4100