319c070594a4f3151182e68538e313b21ebd22f847666cb0503ea608e28405be

Analysis

max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 03:16

Target
2026-08-20_1e0fceb8ba6ec7102189e2adc7df84c0_cobalt-strike_glassworm_icedid_stealc.exe
Size 250KB
Sample260821-dspdps1hrb
SHA256 319c070594a4f3151182e68538e313b21ebd22f847666cb0503ea608e28405be
MD5 1e0fceb8ba6ec7102189e2adc7df84c0
SHA1 929fec0e5805beab566e5bd30591bb401802cccc
SHA512 26a196817c2908300fe6d6ca75bb3d3e2b2702a0684d3da04bb03f464b7415bff5ff0a9bb7ca1bb62b89b70ee0d182acd72b19d33f8f86c8f7f5347ebef4e41f
SSDEEP 3072:k546+4nyXwCDeLOadEL5Dmds4x65BmiWdGkGI6Ay/QN7Yrfquslu8qqerb:k547je5dEL5DmdJmpWTN7NCf
TLSH
T1B4447D59B7A51CFDEDA7C13DCD020906DB72BC5647A0E78F23A40A964F236909E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3376	2026-08-20_1e0fceb8ba6ec7102189e2adc7df84c0_cobalt-strike_glassworm_icedid_stealc.exe
3376	2026-08-20_1e0fceb8ba6ec7102189e2adc7df84c0_cobalt-strike_glassworm_icedid_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_1e0fceb8ba6ec7102189e2adc7df84c0_cobalt-strike_glassworm_icedid_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_1e0fceb8ba6ec7102189e2adc7df84c0_cobalt-strike_glassworm_icedid_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3376