d3179fd4c030070da68c821f7528dbf8a8a6d20fee7b579a0f3c3c5fc3156420

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 04:16

Target
2026-08-15_298da8599e5b26e1d817909420fe2717_blankgrabber_coinminer_gazer_glassworm_helldown_icedid_l.exe
Size 15.7MB
Sample260815-ev3jsayeng
SHA256 d3179fd4c030070da68c821f7528dbf8a8a6d20fee7b579a0f3c3c5fc3156420
MD5 298da8599e5b26e1d817909420fe2717
SHA1 e283516bff5269d40c684ea9f3779dda05d2b649
SHA512 3f923c3a61f34ed28e37cf3157061332d3ecaa92699acdb909077d00090d676c3581186aeeb31032eaff723735a515efc203341aed32d46d2890602707bfd5bf
SSDEEP 393216:ORINxQUjwiytujIkBoZQRpKZ6JwvGOPAmktQ9L1:P4HuOQyL
TLSH
T1E4F69E5BE7B900E5C5BAC038D5426227FA717869433453DB6B985B9B1F63BE09E3E300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6012	2026-08-15_298da8599e5b26e1d817909420fe2717_blankgrabber_coinminer_gazer_glassworm_helldown_icedid_l.exe
6012	2026-08-15_298da8599e5b26e1d817909420fe2717_blankgrabber_coinminer_gazer_glassworm_helldown_icedid_l.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-15_298da8599e5b26e1d817909420fe2717_blankgrabber_coinminer_gazer_glassworm_helldown_icedid_l.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_298da8599e5b26e1d817909420fe2717_blankgrabber_coinminer_gazer_glassworm_helldown_icedid_l.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6012