0486bafc7377b560016aefe38c6a8dea293d908eebe1c56cf4758fea9dcd3033

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 23:34

Target
2026-06-04_3c5bdf74cd4e55263e4bdafed84e8fb6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 333KB
Sample260604-3kt2nahv4j
SHA256 0486bafc7377b560016aefe38c6a8dea293d908eebe1c56cf4758fea9dcd3033
MD5 3c5bdf74cd4e55263e4bdafed84e8fb6
SHA1 6b81b9ded6d9f59c8bc4d84df42e1590fbaca2b1
SHA512 53ece0277599a7b08511664e0f9d364d562dcbe8fec3721cffc31d65d8c1e3d1b899aedc6807ccd369e99c967ab112577e5556b1b85161093f5c9a164c76cb76
SSDEEP 3072:qwB3r4vnMu8FXx3mQsSm39bJPQ6/qQfKn+FF/99F/25wbyuswLoWg80vFA/yff6B:qrn4FXRaSQJPQ6lfK+Fd99x0d3yP
TLSH
T12E747C1AF7A414F9E967813CCD428906EA727C564B60E7CB17A06A973F336D08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2268	2026-06-04_3c5bdf74cd4e55263e4bdafed84e8fb6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-04_3c5bdf74cd4e55263e4bdafed84e8fb6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_3c5bdf74cd4e55263e4bdafed84e8fb6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2268