Analysis
- max time kernel
149s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/08/2026, 00:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
- Size 36.8MB
- Sample260812-aalcjshd64
- SHA256 5e5126f3eff2fc410406d2e4f667a0463d2a4130b6f5afa088e9d95a9eb1e2cc
- MD5 55535141344e39107dc69c9fc24d7fc1
- SHA1 59542d72ce31b2f0cbd170f9189a6147bed2c009
- SHA512 6db3b62ec658c46fc91ac61abc7ff4adc550b041dfcc711045302b8248d9e0027c5cd61f838068793f01594bbefffef55e06a7f4d010b45b4a88ec91c79f7ce6
- SSDEEP 393216:6G8RPGaZ4AwP/9eMUXGa7e6d24VQaxH1pfuCOGCZP7upAyE:ejvo4K4H1luCOG8CWyE
- TLSH T137874992BA960ADCE49FE2799EE942B1FE333446433112C746D845451E8F7F08E3BB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 4916 2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe 4916 2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4916 2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-11_55535141344e39107dc69c9fc24d7fc1_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_nj.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:4916
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.3.3-snapshot\x64\glfw.dll
- Size 484KB
- SHA256 affa7e54eb0dedce4a5721c327c1a16035edbbd039cd402e08107d6d2d55eb1a
- MD5 8cabdbe3d67546771b02af5d42073cfe
- SHA1 2e19147110b9872a52814956bab151a7aa80ce58
- SHA512 b7f46feef779e5772fc7711fda601fdda6ee4bf41d4fb87735a0b8fdc5fdbbdab23ba1760989e15d66cf9ba65409933cbce858eda169d04f13f401198245ad1f
- SSDEEP 6144:QHi9k9IQYWWS4JJbzxazY4czAHxOoThkaQo3:QHivQYWX0bzxazY4/3
- TLSH T100B4B61967B2060EDF2B4433C6CFF9219477B04C3FDBA59E7E9019E47E25BA140A9B24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.3.3-snapshot\x64\lwjgl.dll
- Size 468KB
- SHA256 a39adf52947fafd954c2a86ce031abb8c59825f7ee50337ac8c41e4280abe82d
- MD5 d8ea3886d9f59b514bfa5b24ab69c0ab
- SHA1 2bf57942dff5360889f0e89c58d5acdc54e5f1ea
- SHA512 ba8af0415c7b0454dd8bdccf78ed59da3bb5cc5f631dd060d3cd0eaf74d8f55d7531248b6b8a995ba5b672dc0386d3fa198e8c761f2e1cc0304da0dc029bf29e
- SSDEEP 6144:p997Xkbij3eAMVXiDiA36PFpIiThjnC/smb72NI:p997Xkbij37MVy+A3+J4bS+
- TLSH T132A4D931DE12C68CDCEB723960531001EA7778651B1216CB27ABDA5BB11ABF093F6F25
- MD5 SHA1 SHA512 SSDEEP TLSH