e3e10852feb7ec0e5f03cedca491bc7f40085556ef89894ebe55cc6e4900bd05

Analysis

max time kernel
150s
max time network
119s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 00:20

Target
2026-07-29_0b5b616ae157c13e6e99a689c4ba094f_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Size 63.8MB
Sample260730-amvrrayydt
SHA256 e3e10852feb7ec0e5f03cedca491bc7f40085556ef89894ebe55cc6e4900bd05
MD5 0b5b616ae157c13e6e99a689c4ba094f
SHA1 f2b1b2942eaaa79d27b22e20a3b1eba755339883
SHA512 c8f56d3d63f8d6d7703a736e88d6a8ab294471e934c82565f3cc5784f44eb1356dd85a667613fdc330978830b13d1911d9cd401048a3452c65b64d173e7fbb15
SSDEEP 1572864:c2FeWJWEWc49Vrrx9xSKI2L7Qz/Q0zG8gRO:clCWXTrtjS+XQzN3
TLSH
T14DE7233A737842ECD0A6C0BDC9125A06EB71BC52933187DB05911A6B0F3B7E5CE79B61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4812	2026-07-29_0b5b616ae157c13e6e99a689c4ba094f_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
4812	2026-07-29_0b5b616ae157c13e6e99a689c4ba094f_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-29_0b5b616ae157c13e6e99a689c4ba094f_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-29_0b5b616ae157c13e6e99a689c4ba094f_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4812