Analysis
- max time kernel
149s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/11/2026, 03:58
Behavioral task
behavioral1
Sample
2026-11-12_483ad47e9725c633a501af3e8f520153_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_483ad47e9725c633a501af3e8f520153_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-11-12_483ad47e9725c633a501af3e8f520153_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
- Size 45.1MB
- Sample261113-ejwl4aft8z
- SHA256 6462c7c7c17f70d487acf3f7deb58206b4192ffa999de22baa3ed59e2254a4bc
- MD5 483ad47e9725c633a501af3e8f520153
- SHA1 b30e9e78ad048b06c78dbfee6e9598ee2662f75b
- SHA512 19621d8ba1ed6853f880610de6bf7544e5f5d82e377be7cb9d725c35e13447da7974cb3bf02ee888a222d6d37e98823ae0ebb840f55d6c671b72f11a30ccf923
- SSDEEP 786432:MNM+et+ccY9bi4NUkyPj1DKjphpUgjWeFSUyPhJM+Ptc6Otfpem/bLCKS+wcJ6aF:/+kFck7HjxUM36ODDLY+wckaum
- TLSH T14BA78EDF11E766CDF4F5AC3480002D1AB5607E2D9F19A5E2C576B13037399CC2A6EAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
pid Process 4480 2026-11-12_483ad47e9725c633a501af3e8f520153_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe 4480 2026-11-12_483ad47e9725c633a501af3e8f520153_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-12_483ad47e9725c633a501af3e8f520153_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-12_483ad47e9725c633a501af3e8f520153_cobalt-strike_coinminer_glassworm_icedid_njrat_stealc.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4480