Overview

overview

4

Static

static

1

2026-08-18...ar.exe

windows10-2004-x64

4

2026-08-18...ar.exe

windows11-ltsc_2024-x64

4

Analysis

  • max time kernel
    148s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    18/08/2026, 08:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-18_2ebe7860422ebb06884dce46357bdbe2_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe
  • Size 5.1MB
  • Sample260818-kcrbpaygpe
  • SHA256 38a2f1ab50c379f7d9f9e3279386d1786955742d751506ecee8b8a9946d31a4c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-18_2ebe7860422ebb06884dce46357bdbe2_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-18_2ebe7860422ebb06884dce46357bdbe2_cobalt-strike_coinminer_glassworm_icedid_njrat_remcos_stealc_vidar.exe"
    1⤵
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Suspicious use of SetWindowsHookEx
    PID:2776

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        resource.eng
        • Path C:\Windows\Temp\resource.eng
        • Size 45KB
        • SHA256 9c58dd0e39531ee7d00173651012631b7b3fb73dbd8f6afecf53e4440a3c15c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download