Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 05:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe
Resource
win10v2004-20260513-en
31 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe
- Size 35.0MB
- Sample260820-f9f5rsszhy
- SHA256 690a9cfb96af9e690c9bcdc733ef4b5226982e23a1b753ed3243a5f42db4919d
- MD5 ab1c9cc3fd4b43ae364823a1ac20039a
- SHA1 aad319fd4e9412af33ad79d92edf2821cbb22ee0
- SHA512 ebb993ea8c0cd284e1823294412956322ca9022c4fbb00b56fdd5177df96d97b65c49ad03df8b33f1da98f56f40aa4a9e477f56d2abf300c4a93de9961877943
- SSDEEP 196608:eQnmE+fMeDKqTnrT+B7A6Z6dSBqtiEPFNPL12V5pvUFgAz:zKJnGBr4Xu7vUF
- TLSH T1E587074ABB40CEE6E11A85B098A77B1163FEFD6147E1C30321C83B15DF1B29D4EA7598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 32 IoCs
pid Process 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe 6600 2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_ab1c9cc3fd4b43ae364823a1ac20039a_amadey_cobalt-strike_coinminer_dosia_glassworm_icedid_nj.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6600