Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/11/2026, 04:33
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe
- Size 6.1MB
- Sample261110-e6hnrayzdv
- SHA256 0bb5f1a2f37b69c6b91b6682abfc5e02409efc360525db7eadce7cd39e7bbafb
- MD5 f83337a1babf01bfd904b8975553551e
- SHA1 54d54466f46560168dd8e5b9b6092b2c29a21cb5
- SHA512 bf606f59e904fc3c5d655f039369db82184f18de771ec9290c64709e9e0fb46d77b8e93b51f6f1dfb3fc8107153bb8d76890eda6b86223a1e738598800559f98
- SSDEEP 49152:5Az3NoFFENWte34U/dKQWYfHgOFot0h2lbK62FX47RuxPx3uTMx1rGSHexugffj6:kn34UAQn81IufsMlz/930Hew
- TLSH T10D56AE52A2A840ECC53BD078D65AB60BF771790503349AEB13E05A666F33AF05F7BB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3132 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3132 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe 3132 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe 3132 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 3132 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe 3132 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe 3132 2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-10_f83337a1babf01bfd904b8975553551e_cobalt-strike_glassworm_icedid_njrat_stealc.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3132