c6d9d09844c63d6819ed00c1cf951793c86caad804e3e9c3db4b3fd9b49c2502

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/05/2026, 03:09

Target
2026-05-07_fc33a9cac28d0c1fac9e97219d33998f_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 7.6MB
Sample260507-dnwbfsev3t
SHA256 c6d9d09844c63d6819ed00c1cf951793c86caad804e3e9c3db4b3fd9b49c2502
MD5 fc33a9cac28d0c1fac9e97219d33998f
SHA1 a439c14652b71351924016a54b06a377fc3b9af7
SHA512 5f71b104e0a3e8d725f0e2536834ea97a49a995fea5c9947dae1a02bd645b91cac58dda26538270f4cab4afc57d6ed243dcba004691c503ba8264cd68752a339
SSDEEP 196608:TzyNg4nj50PyViW7FgJsn0WkeMZhWX33olB1Gdkx:y6g0Py9mJi0LeNXIjAG
TLSH
T1D3863309E3A505FCE416E0BCC9164543E3B6B84E0731EBCF03A945A31F776A49E6EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4948	2026-05-07_fc33a9cac28d0c1fac9e97219d33998f_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4948	2026-05-07_fc33a9cac28d0c1fac9e97219d33998f_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-07_fc33a9cac28d0c1fac9e97219d33998f_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-07_fc33a9cac28d0c1fac9e97219d33998f_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4948