2f2a888ccac1116fff1dd56ce5a37d1f851fa3e2954d8ed795ffe9e479d26924

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 10:50

Target
2026-06-04_f403d82d701f89477975f962d50385c7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 807KB
Sample260604-mxngmscy5t
SHA256 2f2a888ccac1116fff1dd56ce5a37d1f851fa3e2954d8ed795ffe9e479d26924
MD5 f403d82d701f89477975f962d50385c7
SHA1 1d5f4a770411a6049e963920522660f81826ab84
SHA512 b60817566795b1cfab0169319eaa80637d73c7dcedeb76bbe4f963e75ee3b9a8813ce928a7ff878f8a8a8947a4da3fe31fb7395c1d2d6688aa02cfbe2a388050
SSDEEP 12288:eO4vI5TH5MihmGwNz4TNSeznBfevIChdph0lhSMXl+eUTw:v4v6ZMiYpNz4TNSeNegOh0lhSMXlxUTw
TLSH
T126059D1AEAE842ECD17AC17E8466264AF7B17C4A47556ACF039235AB1F735E04E3F301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4308	2026-06-04_f403d82d701f89477975f962d50385c7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
4308	2026-06-04_f403d82d701f89477975f962d50385c7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-04_f403d82d701f89477975f962d50385c7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_f403d82d701f89477975f962d50385c7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4308