871b285de8bd30efda7383ce67d36955bf40f277ef8a8ad7167cf609112ef6ce

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
25/05/2026, 09:48

Target
2026-05-25_2e73c5747e3b83522f6d57f4fa70e70b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 158KB
Sample260525-ltakyacy4q
SHA256 871b285de8bd30efda7383ce67d36955bf40f277ef8a8ad7167cf609112ef6ce
MD5 2e73c5747e3b83522f6d57f4fa70e70b
SHA1 bec43f6607e80e4b2a89afdb4de9ca25a35ab580
SHA512 3725605bd69e9f97c3d53546eed3caa37826d0d3d99facbe63720e76e40da3ae49864952026c835323ab5a21b8aaec558ccc0aefd58e16a2f859683a7bb8ea51
SSDEEP 3072:wQjDu4LClUtCxeI/XGczej0rAd0qbKPtBbadr/Vw0v:wr4QiCxSborA6GRC0v
TLSH
T16BF36D97B3A530F9E0778139C9A14A46E772783517209BDF03A0477A2F236E09D3EB65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	2026-05-25_2e73c5747e3b83522f6d57f4fa70e70b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134241761402762555"	2026-05-25_2e73c5747e3b83522f6d57f4fa70e70b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-25_2e73c5747e3b83522f6d57f4fa70e70b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-25_2e73c5747e3b83522f6d57f4fa70e70b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Modifies data under HKEY_USERS
PID:2072