Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 01:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_53beccd8043fe2454be24de7e91313c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_53beccd8043fe2454be24de7e91313c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-10_53beccd8043fe2454be24de7e91313c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
- Size 29.2MB
- Sample260811-bq33zaysdy
- SHA256 a772221ccfd4e463d8325781b7379135016667dc9b63b262d800cd4555d9caf6
- MD5 53beccd8043fe2454be24de7e91313c5
- SHA1 a8f038ef0942d5aa8e866f1a1c84ab470c3c5bd1
- SHA512 0e62f8d675a1587637063c84fa9ae3e05f2a2dbbec5792392d36b5443ce3c647ff60a561d7e9182dbd793167ce63f59b04355696f63398b38b6d965b00f6f7de
- SSDEEP 786432:tPztt1lbUj4iYIWOy9Q7J+78uWgy049Vq:jzRUstIWJWEWc49Vq
- TLSH T18367023A737801EAF067C1B8D5134A06DA72B852933487DB05F16A661F3B7E6CE39760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1756 2026-08-10_53beccd8043fe2454be24de7e91313c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe 1756 2026-08-10_53beccd8043fe2454be24de7e91313c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_53beccd8043fe2454be24de7e91313c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_53beccd8043fe2454be24de7e91313c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1756