c8d777ca784fb2e49b44265b264ec535b9f313d88b28afd054d6f367ce2a70b5

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 02:22

Target
2026-08-18_3f8ae9edcb3a190b7a8ebebf1768e0ab_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
Size 35.6MB
Sample260818-ctnccsthnd
SHA256 c8d777ca784fb2e49b44265b264ec535b9f313d88b28afd054d6f367ce2a70b5
MD5 3f8ae9edcb3a190b7a8ebebf1768e0ab
SHA1 961c07988a976a9db01075f9651b3989d52a09cd
SHA512 1b8cd71231ded40305f360cbba9d51e82202dafc943cd8bcc0b330b06c156e8d270bb85f885261c1e825fdf42b15d515a5218ce871f4fdbb1990de9c95102588
SSDEEP 196608:XXgss/o8HiY+t8lhYpqzWfsgipAOMfNDewy5baMIIB72ML+z8r7yB4JR4f9uF/Of:XwsYoDuYQC50wy5bkpoJR4f9uF/ONOgV
TLSH
T192876B17EA6504E9C1FDD134C6678613BB717C59073127DB3AA4A6282F37BE09EBA700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3980	2026-08-18_3f8ae9edcb3a190b7a8ebebf1768e0ab_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-18_3f8ae9edcb3a190b7a8ebebf1768e0ab_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-18_3f8ae9edcb3a190b7a8ebebf1768e0ab_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3980