140c46d667d16b1491f6b830812e846c25aa2b18e68bd695023c69c393ad7081

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 02:55

Target
2026-08-20_6b3c5ff9eb7599677d3eb522aae120c3_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
Size 43.4MB
Sample260821-dektcs1fph
SHA256 140c46d667d16b1491f6b830812e846c25aa2b18e68bd695023c69c393ad7081
MD5 6b3c5ff9eb7599677d3eb522aae120c3
SHA1 5c4b04337ef3eae6d8b74d684c01049e03d02ef0
SHA512 81fae835ffd171cd5fb2ce2a55aa6df8b2e69113edb2e896c6f6edb4782b3382ac8e92992c27a9664faa30283a5954d0b0ba8c63a5cc567ccc9a4372649c3caa
SSDEEP 196608:FzO3KOAVdX7Z2sitYJmlHUylj0kzg07EoSQShUlOi8xGJP6JZE:F63KFZjJmlHHaOg07r1ShUlO46Ja
TLSH
T1CAA73A43F8694CD5E9BEC930C9A655237B703C65472027DB2B60B618AF7EBD065FA320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1840	2026-08-20_6b3c5ff9eb7599677d3eb522aae120c3_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
1840	2026-08-20_6b3c5ff9eb7599677d3eb522aae120c3_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
1840	2026-08-20_6b3c5ff9eb7599677d3eb522aae120c3_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
1840	2026-08-20_6b3c5ff9eb7599677d3eb522aae120c3_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_6b3c5ff9eb7599677d3eb522aae120c3_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_6b3c5ff9eb7599677d3eb522aae120c3_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1840