f6067f4f5fc0091ceff65d72d07aaf1b1ff7760c8569f16b601dd860b853d604

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 10:02

Target
2026-06-04_6f8812592a37f09dcc784e421bc689d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 800KB
Sample260604-l2ymqsct7y
SHA256 f6067f4f5fc0091ceff65d72d07aaf1b1ff7760c8569f16b601dd860b853d604
MD5 6f8812592a37f09dcc784e421bc689d7
SHA1 6c84fd0a554faf53957522b639c4e59f969d7e4f
SHA512 6bb2093dc189a0215af471e50473906e5744cabcdd60169ad181037da4ed3be118a9ce918b393fd9cdcc14bdce610d38224bb481e55eefcbaa24a3d2cf2880af
SSDEEP 12288:VX8omrDSk4U38myHrAUAi0JZ2r5ph0lhSMXl+JkbCiN:F8o+qU38myHrAUAiEZEh0lhSMXl+kbCg
TLSH
T159059D1AEAE842ECD17AC17E85A62A4AFBB17C4643616ACF039135671F735E41E3F301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2556	2026-06-04_6f8812592a37f09dcc784e421bc689d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
2556	2026-06-04_6f8812592a37f09dcc784e421bc689d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-04_6f8812592a37f09dcc784e421bc689d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_6f8812592a37f09dcc784e421bc689d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2556