8a5fec61a22ee656888c9f6dc2fb00d3241ffa041f570057b90947acf6eb9c09

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 09:41

Target
2026-06-04_2a59aa59bd793017d5144dd9427a5289_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Size 4.3MB
Sample260604-lnrx2ab151
SHA256 8a5fec61a22ee656888c9f6dc2fb00d3241ffa041f570057b90947acf6eb9c09
MD5 2a59aa59bd793017d5144dd9427a5289
SHA1 2eae5b167c4114a5c4a72cba8bad67a0d2205db1
SHA512 c61ce26428f981afa320b5568fd9bf4f9faf6a9562d8bad91b3bebe3b4e80d96755afe388b5899ae07749f43a2e95042264c50dfa380ce5b4051fb75c67efa65
SSDEEP 49152:3KUPjb10lWVzB4P99TfS2Ne+eiLBWikY+YbGhhSiSuXSJ6n1T4CFBERymLy:6UqlWuTjH/y66eiS7QTBGb
TLSH
T1C126CF12E79982E8D06ED1B8CA538707E33174061B3487CF27E95E965F27EA09E7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
956	2026-06-04_2a59aa59bd793017d5144dd9427a5289_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
956	2026-06-04_2a59aa59bd793017d5144dd9427a5289_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-04_2a59aa59bd793017d5144dd9427a5289_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_2a59aa59bd793017d5144dd9427a5289_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:956