Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 15:36

General

  • Target
    2026-08-04_6364d0e9c890ad91fcc5425d87532f48_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
  • Size 95.1MB
  • Sample260804-s1x35stdjf
  • SHA256 0c0faf79ccf98c37f1c8a49ce0126f7d325b569f65aec1fb1c92d0ae31cb0b81
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_6364d0e9c890ad91fcc5425d87532f48_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_6364d0e9c890ad91fcc5425d87532f48_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe"
    1⤵
    • Loads dropped DLL
    PID:3520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        api-ms-win-core-_primn.node

        • Path C:\Users\Admin\AppData\Local\Temp\MS_Core_3520\api-ms-win-core-_primn.node
        • Size 134KB
        • SHA256 386e7a520b143aa7b6fa1a28a0237391a938bbedd0b245733a3da3a215026a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-ffi_na.node

        • Path C:\Users\Admin\AppData\Local\Temp\MS_Core_3520\api-ms-win-core-ffi_na.node
        • Size 588KB
        • SHA256 b0e0c6ad80fccc92a41f644afe3ad1d7e4ebcac9caa94a9ccf4eaa0dea2247e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-koffi_.node

        • Path C:\Users\Admin\AppData\Local\Temp\MS_Core_3520\api-ms-win-core-koffi_.node
        • Size 2.3MB
        • SHA256 a6caa84c1f8c459215a783318b818d3fa1b260d2d821c22c22864cd2af216490
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-ref_na.node

        • Path C:\Users\Admin\AppData\Local\Temp\MS_Core_3520\api-ms-win-core-ref_na.node
        • Size 579KB
        • SHA256 837cb201a460a44d025689218d3b0e588ae3edbcd6ab11f415b147b5331cc843
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sqlite.node

        • Path C:\Users\Admin\AppData\Local\Temp\MS_Core_3520\api-ms-win-core-sqlite.node
        • Size 1.8MB
        • SHA256 f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c
        • MD5 SHA1 SHA512 SSDEEP TLSH