303181f78edda3df07423df5cfa66523f7fc5fd84265246daa9a543a6fa49351

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 11:06

Target
2026-08-03_8165bf936bc87c6baaa54d0840367d68_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Size 41.2MB
Sample260804-m7vnpsdl2w
SHA256 303181f78edda3df07423df5cfa66523f7fc5fd84265246daa9a543a6fa49351
MD5 8165bf936bc87c6baaa54d0840367d68
SHA1 8de66d6c8f2579e385f7056cbbab6a8aacf3aeca
SHA512 66b760277adab9bab02e5a139dc2b6c2a0be7550ee683d2f1fe3c0b3aca99bae42aa2be44ffd09704d9af19f9a935d3d077ff891398be7b8105bac83f2131727
SSDEEP 786432:T4C8OYFhi1kWOy9Q7J+78uWgy049Vra1ahWlMbexq9xiBnKV:c2FeWJWEWc49Vrrx9xSKV
TLSH
T14D97123A737C42E8D0A6C1BDC9525A06EB71BC52933187DB05900A6B1F3B7E1CE79B61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1096	2026-08-03_8165bf936bc87c6baaa54d0840367d68_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
1096	2026-08-03_8165bf936bc87c6baaa54d0840367d68_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_8165bf936bc87c6baaa54d0840367d68_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_8165bf936bc87c6baaa54d0840367d68_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1096