ea27f357cbddb1de02a079766bc789cb8d0d63f5f7678464391686b0b750b539

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/05/2026, 11:43

Target
2026-05-28_fe5e062b86cd5a6a40ef54d8ab67183c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 1.0MB
Sample260528-nv3dfsd15k
SHA256 ea27f357cbddb1de02a079766bc789cb8d0d63f5f7678464391686b0b750b539
MD5 fe5e062b86cd5a6a40ef54d8ab67183c
SHA1 529e8e4f4b20f40b75e18f6b8337c816dde23700
SHA512 468a7c52e5db8f21f117cd840458f4a0a9cedff75d7ad03b4ba55ba542c3b48b937870d3c9d48525fc7347029794e7674d1c57dab13a3c8d4418a23391ec0273
SSDEEP 24576:9qCxeAqQATm9UrZbyxStJhiVUZs/E7PJdhDaW:9TeFlmot/iVUZ2ErJd
TLSH
T1BB355A0AFBA404F5D4B7813889635506F7B2785A0370DBCF17A486669F2B7E0AD3EB50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3124	2026-05-28_fe5e062b86cd5a6a40ef54d8ab67183c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
3124	2026-05-28_fe5e062b86cd5a6a40ef54d8ab67183c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_fe5e062b86cd5a6a40ef54d8ab67183c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_fe5e062b86cd5a6a40ef54d8ab67183c_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3124