Analysis
- max time kernel
149s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 13:29
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 4.0MB
- Sample260804-qrhwra1gqa
- SHA256 3c574fe394c823018c8d1873584b81f79a4a390e0e1cad1983e4fc78bbe8ba82
- MD5 f42fd1c0c7a63aac03e5fb7a8999256e
- SHA1 0ad4e8ee099526ba2aa5e2517a72a02f4d2ea847
- SHA512 c08e9750e70a7df490d4f22d2f4d091850c1d5d561fc5f7adb6a53394c0cfb7020a9f631b7eb9041dccff1e5c73b919711776bca1272df6a91b4f82ec30b4960
- SSDEEP 49152:WGtlqslIU6i8VwASOzSc1i8W4ciyxSQ9fA/Kb+mZC+2tet/+RitrRD9WKOWd/iSv:2+E5xKyy3cF2OBGoAL9Uk
- TLSH T1CC168C59B7A400F8D5AAD138C5564723D6B2FC5627B097CB06A4A6BA0F73EE11F3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 4992 2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 4992 2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 4992 2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 4992 2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 4992 2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 4992 2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-04_f42fd1c0c7a63aac03e5fb7a8999256e_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4992