1f029013fffb47fe90725e1aa16beabf89f715907afafb23185bdc22c950e0bc

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 04:45

Target
2026-05-28_70df2907e34cce113c17df29b7a401ef_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 152KB
Sample260528-fdgresfv6r
SHA256 1f029013fffb47fe90725e1aa16beabf89f715907afafb23185bdc22c950e0bc
MD5 70df2907e34cce113c17df29b7a401ef
SHA1 e7be26a67c930cfbc17331bfadd3dd5ee4c03d83
SHA512 bc6402d523b1e1e7bbf2d4237459c79e51fb934d969efd8ece2f05e3781e301d8cd0a24ac61522ebc4e8c0f92fb20c085145a798a93698f7aabf74224fdca76f
SSDEEP 3072:9Rksoi8cRlaXbZX1hnZlut4uOy8GpKhde:9kTqMvxZluTFwY
TLSH
T1FFE36C07B3A934F9E077827989A15646F772787617206BEF03A047762F236D09D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1580	2026-05-28_70df2907e34cce113c17df29b7a401ef_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
1580	2026-05-28_70df2907e34cce113c17df29b7a401ef_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_70df2907e34cce113c17df29b7a401ef_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_70df2907e34cce113c17df29b7a401ef_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1580