8fd2952dd129dc49806ff560125068013664daa568e3154471998e755202f5c7

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 16:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-25_ad913cb5450103ba4c0ce165e912960c_amadey_cobalt-strike_glassworm_icedid_njrat.exe
Size 3.4MB
Sample261026-tqfa1sty4n
SHA256 8fd2952dd129dc49806ff560125068013664daa568e3154471998e755202f5c7
MD5 ad913cb5450103ba4c0ce165e912960c
SHA1 aa5fc161265db2d94794aa69d10d38dbaeddf44d
SHA512 16b6924c99d624e192c835a53a6c32d1b72c75dda22645a053f719368547206f4668fe811a4a3e6475be98a8ad2ebd0774ebc0885fcf629781416635341ebb7d
SSDEEP 49152:HDnSMuGdUB2ltyhMyJJ0xcB95u0k6EqpEXynGTikVdZNcDSHvH6:jndu108u0Gv
TLSH
T1F3F57C0AF7BA51D5E5BBC23D82675222EEB1380A433557DF868047762F23BE05A3E714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	2026-10-25_ad913cb5450103ba4c0ce165e912960c_amadey_cobalt-strike_glassworm_icedid_njrat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	2026-10-25_ad913cb5450103ba4c0ce165e912960c_amadey_cobalt-strike_glassworm_icedid_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-25_ad913cb5450103ba4c0ce165e912960c_amadey_cobalt-strike_glassworm_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-25_ad913cb5450103ba4c0ce165e912960c_amadey_cobalt-strike_glassworm_icedid_njrat.exe"
1⤵
- Checks processor information in registry
PID:2592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads