93a2e45fe019f78f8c8c0061b4bfc83a7831f54d570d5196bcbcde0fc3825e6e

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 07:20

Target
2026-08-20_14d8e242d27d3c10cbae079572b895c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc.exe
Size 24.8MB
Sample260820-h55nnssbpc
SHA256 93a2e45fe019f78f8c8c0061b4bfc83a7831f54d570d5196bcbcde0fc3825e6e
MD5 14d8e242d27d3c10cbae079572b895c5
SHA1 f054924cb46c5f4eabb755328654a6f51010361f
SHA512 ca45a591441354a1a64d13d4af922eb91a7a7ad5348e823c79827e1de9ee69da4c6adb589824cc13cd4e0b628fc86f6873b4cefff6714a459c30eca6b96a7624
SSDEEP 393216:MveI/NKeysy5bR/xOW9IyBqKSID418XGKwu6UzEajY2OUIqYf:E0JNxt9Iy7D4eX6KEL2jY
TLSH
T1A64702E9A6EC02F8C4A7C27882471257F2B1B40943B446CF3B8559A61F23EE51E7FB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1988	2026-08-20_14d8e242d27d3c10cbae079572b895c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc.exe
1988	2026-08-20_14d8e242d27d3c10cbae079572b895c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_14d8e242d27d3c10cbae079572b895c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_14d8e242d27d3c10cbae079572b895c5_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:1988