20b70b0339b372c719643ff57e331823411b893a86df515b40e5bca95c355a09

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/05/2026, 02:25

Target
2026-05-06_091e1f992501096dde4104f7f8292e9d_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 4.7MB
Sample260506-cv98hshx21
SHA256 20b70b0339b372c719643ff57e331823411b893a86df515b40e5bca95c355a09
MD5 091e1f992501096dde4104f7f8292e9d
SHA1 537927534af18dbfc840c89ad04e3fbe489492cc
SHA512 6579e0c4f69f89377f5aec62bef0c5d4753b47216b5d0765217423c260d37b918cdc3352fe8f19a881df03cfc0054bebda90dcf6326b608b6b87bfa946534d08
SSDEEP 98304:JzverDh9fqm5lyDXcDG3KJ2xPKcy+pdnJXNzCB/vJleFeNR:JzmrDDqm5lyQDsFxPy+75NzCtXYef
TLSH
T16D36231AEB9408FDE0A7B17889564906E77A7C8D17318B8F03F056665F272E18D3FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4196	2026-05-06_091e1f992501096dde4104f7f8292e9d_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4196	2026-05-06_091e1f992501096dde4104f7f8292e9d_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-06_091e1f992501096dde4104f7f8292e9d_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-06_091e1f992501096dde4104f7f8292e9d_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4196