4d1a0b4f069354abb7d5a3fc1ae7176048c069a20f9962dda8acd999e8ced699

Analysis

max time kernel
150s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 01:00

Target
2026-08-07_8c56675542620a207d68f69f786c3ec7_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Size 45.3MB
Sample260808-bctmdaah88
SHA256 4d1a0b4f069354abb7d5a3fc1ae7176048c069a20f9962dda8acd999e8ced699
MD5 8c56675542620a207d68f69f786c3ec7
SHA1 9cf3d4cf297d75199d8dafe3b2b1b41763417a1b
SHA512 70c078aab54e26abc0cd17318ec15389302d28d3364d9a4226d5a906eb3b51ed6642f357720781609e5653f962269db7b33d3fc5f3ed7c6b5378513f8555164b
SSDEEP 786432:Kpr6FjMucY9bi4NUYYviQTwEoqrtdCfb/YIrtUOfwxURofpem/bLCKS+wc:W6ZtcYJGtAfUtUR4DLY+wc
TLSH
T141A78DDF15E765CDF4F5AC3480002D1AF5607E2D9F19A5E2C57AB03037399CC2A6EAA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4076	2026-08-07_8c56675542620a207d68f69f786c3ec7_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
4076	2026-08-07_8c56675542620a207d68f69f786c3ec7_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_8c56675542620a207d68f69f786c3ec7_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_8c56675542620a207d68f69f786c3ec7_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4076