67b4e70d64c519b7d2031d7e6f65dcf228c1f056aefc2aa5b06fcea3e92fa14f

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/05/2026, 03:04

Target
2026-05-22_286de7d31a7874b473b24f52009292ce_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Size 3.7MB
Sample260522-dkybmsc16n
SHA256 67b4e70d64c519b7d2031d7e6f65dcf228c1f056aefc2aa5b06fcea3e92fa14f
MD5 286de7d31a7874b473b24f52009292ce
SHA1 1a7bd1eacebe59c4a7e6105c66c0f97f6a97f205
SHA512 7bd2af72fec69d338fa51f7189a51d7d992306fbdc4050665733c34525af5af7c1f51de6add4345c54485e342047d7c15368587a3f8d16ca53ad99730203880e
SSDEEP 49152:kj7ZOR3D4UYYQIN9Y3y2xcHXyWxbBcwQtVLfnRHLHdZGXRfpB84iMzIDUPAJf7iB:EC2xcHXyWWt9dO/ENDzGr3OW+SMicwT
TLSH
T1BF065BC99777C08AD8368075CC56A70ED1B3381647A5FBD312654E8B2F3B1A51BAE383
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
4384	2026-05-22_286de7d31a7874b473b24f52009292ce_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_286de7d31a7874b473b24f52009292ce_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_286de7d31a7874b473b24f52009292ce_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4384