Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/10/2026, 19:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_c2ab15ef307b717b929f1975e30e8bae_coinminer_glassworm_icedid_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_c2ab15ef307b717b929f1975e30e8bae_coinminer_glassworm_icedid_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-10-28_c2ab15ef307b717b929f1975e30e8bae_coinminer_glassworm_icedid_luca-stealer_njrat_remcos.exe
- Size 2.1MB
- Sample261029-x1n8fset51
- SHA256 f70e870254a4f952fdcb8474e903d461370f4e957f2a39ddd866ff7b1413d787
- MD5 c2ab15ef307b717b929f1975e30e8bae
- SHA1 139daea5fc09966d0765a233017fc5d277e8fd1f
- SHA512 80c4c6a773d8acd73b36419cf967bf6362252156019bd392e84a8bc9c3c1a07a479a461592f3ee05df8c1c04eca60faec01f97173c6a26bb0bdb2934d249ddd8
- SSDEEP 49152:/EbEVZS8FW5LhWYJ7WP2DJF04/HL2Gi8dcMP8t:KEVAxNhZX/d3dat
- TLSH T1F9A58E56F3E401F8E9B7D13CC6528607EBB1B8590770EBCB06A44AA92F136E11E7E315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4208 2026-10-28_c2ab15ef307b717b929f1975e30e8bae_coinminer_glassworm_icedid_luca-stealer_njrat_remcos.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4208 2026-10-28_c2ab15ef307b717b929f1975e30e8bae_coinminer_glassworm_icedid_luca-stealer_njrat_remcos.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-28_c2ab15ef307b717b929f1975e30e8bae_coinminer_glassworm_icedid_luca-stealer_njrat_remcos.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-28_c2ab15ef307b717b929f1975e30e8bae_coinminer_glassworm_icedid_luca-stealer_njrat_remcos.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4208