4c6988e124df197c9fa752d944eed37732a6fe059a7412a50f890f167aea971f

Analysis

max time kernel
150s
max time network
109s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 22:50

Target
2026-10-25_7c3ade1337ed92b2edbb3ecc07f4a161_coinminer_glassworm_icedid_njrat_ryuk.exe
Size 2.2MB
Sample261026-2seq9shy8l
SHA256 4c6988e124df197c9fa752d944eed37732a6fe059a7412a50f890f167aea971f
MD5 7c3ade1337ed92b2edbb3ecc07f4a161
SHA1 4a87fb92658110a65ba4809864da9935494b877c
SHA512 9becbdc74fc0cc48203e15979a75769cd56914bc24e0cadd3fd99459e8f9bb3a2a2c308f661d25bcb778d566c620d65a254dbd24a246e5d680c8cc0297667c27
SSDEEP 24576:aRiwmkC5Mdy23FtnomTJQl+IeGaqBlFKmWHIjMkXBwvr3h6wicOvdzqG1XSYuo+s:0+kzlQl38HI3RcUdzJ1iZg
TLSH
T1C5B5D076FA448ED7CC928234D8A34B4423789CA40F61470B1BB4F95EEE7B6D94FB9520
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4196	2026-10-25_7c3ade1337ed92b2edbb3ecc07f4a161_coinminer_glassworm_icedid_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-25_7c3ade1337ed92b2edbb3ecc07f4a161_coinminer_glassworm_icedid_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-25_7c3ade1337ed92b2edbb3ecc07f4a161_coinminer_glassworm_icedid_njrat_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4196

memory/4196-0-0x00007FF79D4B0000-0x00007FF79D93F000-memory.dmp

Download

memory/4196-1-0x00007FF79D4B0000-0x00007FF79D93F000-memory.dmp

Download