22b11169cb786a86317a41efd03ffecf98a125e73903ec19e53ea0e82a0f7025

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/05/2026, 15:16

Target
2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_rem.exe
Size 596KB
Sample260530-snmrmsgw8w
SHA256 22b11169cb786a86317a41efd03ffecf98a125e73903ec19e53ea0e82a0f7025
MD5 7a64714505ea781f0ea5e43a08698c00
SHA1 db1283fce8c2cc08bfa38f1896550c111fc4ed09
SHA512 0b99f4d75ed63dcd4e3bf7614b4911ebf1ab497bf1269cc75862b45c681a228397a12e1e27d2562ca3f88c43c60c3cb8dcd0288fcc4963ee5aaafa2a7329fe77
SSDEEP 12288:qBKwZC2tDclPS2MV7IPCa5e4VQjGARQNhiB:qYwZCUUSf1IPCa5yCAR0iB
TLSH
T129D48D53769440FAC163A23889968662F779BC110B61CBDF13807B3E1F726D1BE39B61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1732	2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_rem.exe
1732	2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_rem.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_rem.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_rem.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1732