Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/08/2026, 01:54
General
- Target 2026-08-19_290279bb106ce183c98522ec70a8f1fa_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe
- Size 35.0MB
- Sample260820-cbrbasdl41
- SHA256 725a9ed2f526e3422a3585a07b2a27bdb0a861f6653e2a2a98af48ba94ba04da
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 38 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-19_290279bb106ce183c98522ec70a8f1fa_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-19_290279bb106ce183c98522ec70a8f1fa_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\Al9cH5\azHflF.exe"C:\Users\Public\Al9cH5\azHflF.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
UxEnhance64.dll
adoresd.dat
azHflF.exe
msadox.tb
memory/1952-1-0x00000000041E0000-0x00000000041EE000-memory.dmp
memory/1952-2-0x00000000041F0000-0x00000000041FC000-memory.dmp
memory/1952-504-0x00007FFB6F410000-0x00007FFB6F422000-memory.dmp
memory/1952-524-0x00000000041E0000-0x00000000041EE000-memory.dmp
memory/1952-525-0x00007FFB6F410000-0x00007FFB6F422000-memory.dmp
memory/1952-0-0x00000000041E0000-0x00000000041EE000-memory.dmp
memory/3844-530-0x00007FFB77DD0000-0x00007FFB77DD2000-memory.dmp
memory/3844-531-0x00007FFB55710000-0x00007FFB55C2E000-memory.dmp
memory/3844-536-0x00000217396F0000-0x0000021739F77000-memory.dmp
memory/3844-538-0x00007FFB77DE0000-0x00007FFB77DE2000-memory.dmp
memory/3844-539-0x00000217396F0000-0x0000021739F77000-memory.dmp
memory/3844-543-0x00000217396F0000-0x0000021739F77000-memory.dmp
memory/3844-545-0x00000217396F0000-0x0000021739F77000-memory.dmp
memory/3844-546-0x00000217396F0000-0x0000021739F77000-memory.dmp
memory/3844-544-0x00000217396F0000-0x0000021739F77000-memory.dmp