Analysis
- max time kernel
149s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 16:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_2fa6484272aa5d9591d7169b3d0fca07_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_2fa6484272aa5d9591d7169b3d0fca07_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-23_2fa6484272aa5d9591d7169b3d0fca07_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
- Size 19.5MB
- Sample260925-tsk92s1bja
- SHA256 7ddd4eee00640913b5c4f96164677a1f2d3cf5d9ebc1457e74e65f936262a150
- MD5 2fa6484272aa5d9591d7169b3d0fca07
- SHA1 f8e92d5abb391df2e3080868d277edc70a09023b
- SHA512 0a2e6d60efd4fd7c02f8ccde7b4ba73d534f0c20fa044c4e1d419a79cb52664f18d72b42c7ed6bfacd7349c201989047ccff5487c1a4b541a1e6923c44230c2c
- SSDEEP 196608:PxDYk51hjEHMwdNB3F1NW97a/QHl1shKKXVegjWznlI6o:JDYKPARhTHWzna
- TLSH T174277C47F9A140F8C5AAD134C9668223BB707C994B30A7D76B64E6742F33BD46A7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4548 2026-09-23_2fa6484272aa5d9591d7169b3d0fca07_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4548 2026-09-23_2fa6484272aa5d9591d7169b3d0fca07_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-23_2fa6484272aa5d9591d7169b3d0fca07_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-23_2fa6484272aa5d9591d7169b3d0fca07_cobalt-strike_coinminer_dosia_glassworm_icedid_luca-stea.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4548