2813d65fe82ad7c31e4b1f05a0a9b94ef9a4e39604c42b914d735c0d5a8b73dd

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/06/2026, 09:58

Target
2026-06-03_4bb99cf86b07bcbf175ed8fd8e5743e8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260603-lzrfmscs2w
SHA256 2813d65fe82ad7c31e4b1f05a0a9b94ef9a4e39604c42b914d735c0d5a8b73dd
MD5 4bb99cf86b07bcbf175ed8fd8e5743e8
SHA1 38578440be281e18a4dc993193e6fed603533020
SHA512 659dfda20687f0519ee20d2704d3228b864f163c2740227289b706fcc0696a8f16928caac25a2be77b17c8b67a0e305ac81ce7b5450575b4ca61d6fbd70c0b12
SSDEEP 24576:sKzqRbUjf1jkRD+e2Tpa8/vTGh0lhSMXlFsc:sKzqRbUjf1oRZop9vb
TLSH
T1B6159D1AEB9801F8D0BBC27989A22546F7B27C4657615ACF139135A63F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1580	2026-06-03_4bb99cf86b07bcbf175ed8fd8e5743e8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
1580	2026-06-03_4bb99cf86b07bcbf175ed8fd8e5743e8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-03_4bb99cf86b07bcbf175ed8fd8e5743e8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-03_4bb99cf86b07bcbf175ed8fd8e5743e8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1580