a4d9a48a91e68796c365604bcfceb2fd8f98c1703f028fb30df95f9a37a15887

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 15:59

Target
2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_nj.exe
Size 4.0MB
Sample260529-te53asf13s
SHA256 a4d9a48a91e68796c365604bcfceb2fd8f98c1703f028fb30df95f9a37a15887
MD5 cd5eb654e081972e465ac305a6907089
SHA1 c0270fe24757e12107e1a3ae3141a0a34d39f7b5
SHA512 aa8f2860c794e2a8a34167be3e2babedbfe88bdd5cb55c8ce2c24ce17a4eef58a5565237e459f54019b3309b992ce48bb850fbe2dddf0cd84d83eb41c6b68302
SSDEEP 98304:rXiV2VaIabjKoh9WhceUJF3noxDtOg0rr6:+V2VO32Nw+
TLSH
T10E166D212A608975C41BD2716596E69DD1737C60CF724F8F33857EBEFFB26901A22232
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2876	2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_nj.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_nj.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_nj.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2876