fc927ab2de1d8c5d72e6d842b14df8afbd20f16c84132a75eee626ac57b751a0

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 22:52

Target
2026-05-08_cfec95198c9270a0d8718cd1b869303f_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 3.3MB
Sample260508-2tlafaa14m
SHA256 fc927ab2de1d8c5d72e6d842b14df8afbd20f16c84132a75eee626ac57b751a0
MD5 cfec95198c9270a0d8718cd1b869303f
SHA1 ed69b64943f32fa0e38ee6f579ac9fe0a09d29f0
SHA512 5c5b56a8453e0967ed4478a0bec9e3befbe94f0773e25a7d2944da183894e8e39da9d5f5fbfdb23a36e87d92122cd0385ebee01156fa714340a21eba5cb6c8ce
SSDEEP 98304:4+sjv/2c+91P8xjkIUDEYJf+wj64O7yyQd:xE+c+91P8xjkIUnPayyQd
TLSH
T133F55B9673A1459CC17AC0BCC58B7217E2B1BC880F659BCF6654762D3F33AE8567AB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3180	2026-05-08_cfec95198c9270a0d8718cd1b869303f_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-08_cfec95198c9270a0d8718cd1b869303f_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-08_cfec95198c9270a0d8718cd1b869303f_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3180