Analysis
- max time kernel
148s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 06:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe
- Size 6.5MB
- Sample260809-g3xdvasckc
- SHA256 f3b34126c711c94f512423ec4bf81a7828bc7e88305a72edf141fd5a5a22d72c
- MD5 ffc6bc6ac9ef385724d5d45c62c70799
- SHA1 2084545c483d3099fc13aa0c5b1ca5f3550d0ff4
- SHA512 5dbff0321a62a9e011c50960a0621238b62518ed2adf94a5418991d1f92ef60c1d4f4971e3310e766df46b4ed21e7bbeac10b9efd81855dfdd51b0fbaf7434e1
- SSDEEP 98304:1NwzwL73cnVEc5iaJPqCQwRBLsKuRpg8TlQ37:1NwzU73MVEc5iaJPqCQkZsNpg8Tl
- TLSH T155668C66F79441E8D836D13C8592D313E7B2F825673287CB16B8663A1FA36D02E7E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5312 2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 5312 2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe 5312 2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe 5312 2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe 5312 2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_ffc6bc6ac9ef385724d5d45c62c70799_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5312