6d58e7d31c634f3035bf221ec67f09020cd5ca39d659693cfb403a5f47d99fa4

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/05/2026, 17:53

Target
2026-05-22_52f26434aeb7cfd0fba6c42ca7d72edd_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Size 4.9MB
Sample260522-wglgsaev21
SHA256 6d58e7d31c634f3035bf221ec67f09020cd5ca39d659693cfb403a5f47d99fa4
MD5 52f26434aeb7cfd0fba6c42ca7d72edd
SHA1 a4917df2dea1dd3cb92a4daeb96f76500ac640c6
SHA512 91cb668ed3f6a24ebd75e51198a32f2f25e1a661b2f19bfeb15689577b34849d9739615279bf6af179aa06275ef58a4480958f988a7736f0f439a427f7a84ea2
SSDEEP 98304:U2DBmFn2V771JC49aiUMRgUV/lJLma06/er0Cl:rBmFo73TrRgUQ8er0Cl
TLSH
T1DD362309D7F514FCE0F3A5B9CD924910EB777C095772A68F03A89A961F231909E3DB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3444	2026-05-22_52f26434aeb7cfd0fba6c42ca7d72edd_cryptbot_icedid_luca-stealer_njrat_stealc.exe
3444	2026-05-22_52f26434aeb7cfd0fba6c42ca7d72edd_cryptbot_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_52f26434aeb7cfd0fba6c42ca7d72edd_cryptbot_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_52f26434aeb7cfd0fba6c42ca7d72edd_cryptbot_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3444