Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/09/2026, 20:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
- Size 53.1MB
- Sample260901-y45v2s1vbx
- SHA256 768438dce5edf092c94390e0f161b8c736d55a72ecc04a50b4c7b3e42bc258ca
- MD5 2983e05c4c288f667e9df950dccf4f5c
- SHA1 b3c99fa7b79cbb85cc463486901e39bf66da6ada
- SHA512 894bfac2d31697d11f530c1904e068c7e81a221337531c08d0c3117c3a3c1841882f3f753ac5d738eb06010c3359539917b692ced110e268e40859a92311ec07
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf3:fMguj8Q4VfvBqFTrYIF
- TLSH T143C77C1233F60161E4B39275879B4103DB72B45B673186CB319C43681FABFE4AABBB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 54 IoCs
pid Process 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe 5452 2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-01_2983e05c4c288f667e9df950dccf4f5c_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5452