f57369c44b21d6b85f302e11ca8d7e64c54787aad38da957f43bd7bda22dc783

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 00:50

Target
2026-06-01_3e3b0824ac6fdaf0ebd0381565dc46cc_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 529KB
Sample260601-a7dnzaaw2t
SHA256 f57369c44b21d6b85f302e11ca8d7e64c54787aad38da957f43bd7bda22dc783
MD5 3e3b0824ac6fdaf0ebd0381565dc46cc
SHA1 21ca7aae4c9f25576b3e03c53376c7024c14038a
SHA512 c3af28b710a4303f1dc204606734f827527a30fcdc08f8d3ae8f4fcc1184fc72f1c6e7a0828ce95213fed39aaa0971931b9cdccad84b6139ad6aff7aae930b7e
SSDEEP 6144:TSYYQV78/W0Vs2XbDwWghRRcrT7gplU/o3aUnvO39e8gg0pnJwONjVNC:5YQ2+inghRRW7gplU2nGs/fpndW
TLSH
T13FB4AE86F2E447F9E0279538C556970BFA7138890711ABCB33980AA61FA33E15E7F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3856	2026-06-01_3e3b0824ac6fdaf0ebd0381565dc46cc_cobalt-strike_icedid_njrat_satacom_stealc.exe
3856	2026-06-01_3e3b0824ac6fdaf0ebd0381565dc46cc_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-01_3e3b0824ac6fdaf0ebd0381565dc46cc_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_3e3b0824ac6fdaf0ebd0381565dc46cc_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3856