Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 03:04
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-08-03_36e7419de83bace77bab74f2156ca814_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_36e7419de83bace77bab74f2156ca814_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-03_36e7419de83bace77bab74f2156ca814_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
- Size 53.0MB
- Sample260804-dkq8bsfj8v
- SHA256 f511099c93044cc3f024cad63e121e942948262baa91b7029698778f90ebd84a
- MD5 36e7419de83bace77bab74f2156ca814
- SHA1 a8d34c0b4a4d3cc191145e1a0b28496a84e89518
- SHA512 75bf6c4d6c14d69cdc32d89c05aa02a656c5aa05d139eef18227881085d28903a7f596082d4dcd99cc37d33e0051e23a5aa1fbe652a15ab63200c9f26f00f06c
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfE:fMguj8Q4VfvcqFTrYqwLBW
- TLSH T13FC79D0733E601A2E5B3A2798A9B4103E772B4575731CBDB315C43142FABFE49A7A760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 4152 2026-08-03_36e7419de83bace77bab74f2156ca814_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_36e7419de83bace77bab74f2156ca814_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_36e7419de83bace77bab74f2156ca814_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe"1⤵
- Loads dropped DLL
PID:4152
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\pkg\386e7a520b143aa7b6fa1a28a0237391a938bbedd0b245733a3da3a215026a3f\@primno\dpapi\prebuilds\win32-x64\@primno+dpapi.node
- Size 134KB
- SHA256 386e7a520b143aa7b6fa1a28a0237391a938bbedd0b245733a3da3a215026a3f
- MD5 5dc8861862329b3b4122314922be3ed9
- SHA1 ee8599e12c97574ccd6520d86a4734e579b21d50
- SHA512 13c1b757078d7ce6169b2ccbaf7bcbb71447141d7e8c05238f8bade0b12ea69c922b78ed6e539e156bb2c36171d181238fc5a5fe1061d0f49746462521b64d65
- SSDEEP 3072:mje5LsMWK9BLP5oOB92Kmnf/DDN3yFQ+7j65nu:mjeFbWK7j5VBKnfrDwjInu
- TLSH T12AD34B4BB7A500BBE077C27984A74A01E772B85557619BDF03A0436A2F237D1DD3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH