Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/09/2026, 10:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
- Size 30.3MB
- Sample260922-mcswmatdkf
- SHA256 04d7916f6c6098811270aa4bd64b0b42679659ac8392acd1b2a4a5aa41a10283
- MD5 c229663590024f94f2e15ea495791d5f
- SHA1 a2285655e6cd0e227083bb2c868f3ebf8d0c7f41
- SHA512 f4adeccc525950437a17f6830c407f95dd22c68a103003276823ffc1505e13f53a9e6072e4429057253a6f5546050b0b7184ab4b08ab5703eb036a8761277202
- SSDEEP 98304:gClvSImXQ9EkE6uzJdQ2Orf8wsGF4tVjibVpOMOaci583EGsGFCJNlvk:llvSIkQu5TcT4PILhAxTCxvk
- TLSH T18667EA46B605C98AE0265274D8878FF4A722ECB1C6B1976733A93F1D7FFA30C4E92454
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 26 IoCs
pid Process 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe 2488 2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-21_c229663590024f94f2e15ea495791d5f_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2488