Analysis
- max time kernel
150s - max time network
25s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 02:51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-04_96fffa767a5854ad497e583e9c4213ae_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_96fffa767a5854ad497e583e9c4213ae_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-09-04_96fffa767a5854ad497e583e9c4213ae_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
- Size 52.1MB
- Sample260905-dcdl9sdp3z
- SHA256 07fc93757a9357127207ff924ee03f4b0285837a09f91038a58e6131bf80167d
- MD5 96fffa767a5854ad497e583e9c4213ae
- SHA1 dabf69b23d9869bd0455a32209cf202edcd0ff86
- SHA512 dadd202b9469a30eab1d35777a7a3d83b82a1aa3d091743d2c646ed5f462c2062a37fc729424e9795d41b1822647233cec75a57999a136a554a60da6be7045f0
- SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfk:fMguj8Q4VfvNqFTrY5mK
- TLSH T145C77C0277A501B6E477D1348AAB9513D7B6BC532B308ACB354C33541FFBAE059BAB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 1224 2026-09-04_96fffa767a5854ad497e583e9c4213ae_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe 1224 2026-09-04_96fffa767a5854ad497e583e9c4213ae_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_96fffa767a5854ad497e583e9c4213ae_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-04_96fffa767a5854ad497e583e9c4213ae_byakugan_cobalt-strike_coinminer_glassworm_icedid_luca-s.exe"1⤵
- Loads dropped DLL
PID:1224
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\pkg\6aa8763714aa5199a4065259af792292c2a7d6a2c381aa27007255421e5c9d8c\sqlite3\lib\binding\napi-v3-win32-x64\node_sqlite3.node
- Size 1.4MB
- SHA256 6aa8763714aa5199a4065259af792292c2a7d6a2c381aa27007255421e5c9d8c
- MD5 56192831a7f808874207ba593f464415
- SHA1 e0c18c72a62692d856da1f8988b0bc9c8088d2aa
- SHA512 c82aa1ef569c232b4b4f98a3789f2390e5f7bf5cc7e73d199fe23a3f636817edfdc2fb49ce7f69169c028a9dd5ab9f63e8f64964bb22424fc08db71e85054a33
- SSDEEP 24576:HczztZ12vAxqcdzoAyv+liT0eYiYJ869tUb/K:8zztZ12vodwW0T0NZJftm
- TLSH T119658E5BA2B400BCD5ABC178C957560BE7F2740613349BDF55E08A6A2F23FE2567E320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\pkg\da2172ce055fa47d6a0ea1c90654f530abed33f69a74d52fab06c4c7653b48fd\@primno\dpapi\prebuilds\win32-x64\node.napi.node
- Size 137KB
- SHA256 da2172ce055fa47d6a0ea1c90654f530abed33f69a74d52fab06c4c7653b48fd
- MD5 04bfbfec8db966420fe4c7b85ebb506a
- SHA1 939bb742a354a92e1dcd3661a62d69e48030a335
- SHA512 4ea97a9a120ed5bee8638e0a69561c2159fc3769062d7102167b0e92b4f1a5c002a761bd104282425f6cee8d0e39dbe7e12ad4e4a38570c3f90f31b65072dd65
- SSDEEP 3072:94PTD6FEzMju6bzJKjpEPeTOKvJhEnww+YbRYvPuq:94jQju6b9KilKvJurR8W
- TLSH T1B3D37D4BB3A500BBE176C639C8934A05E776B81517619B9F03A0475B1F237D1EE3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH