be15785cc753211a17cc1813d9b9e74820ec86f3de77cf122b7ab66cb8cddc5f

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 19:09

Target
2026-06-28_c8591fc737547d2f3f9ff833e8574cfd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260628-xt7q8ab18v
SHA256 be15785cc753211a17cc1813d9b9e74820ec86f3de77cf122b7ab66cb8cddc5f
MD5 c8591fc737547d2f3f9ff833e8574cfd
SHA1 738ff8dc0ed30040adcee32c25bfc50cb7a5feab
SHA512 8cdfd3ef3949c0e0bd6ad44e6febd6a95440d721ccff925282780cbdf9815ba15b11840697c2184024f4334924df754b3d715f812d96519160797518fbcc60ff
SSDEEP 24576:sKzqRbUjf1jkRD+e2Tpa8/vTGh0lhSMXlFst:sKzqRbUjf1oRZop9vi
TLSH
T125159D1AEB9801F8D0BBC27989A22546F7B27C4657615ACF139135A63F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1440	2026-06-28_c8591fc737547d2f3f9ff833e8574cfd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
1440	2026-06-28_c8591fc737547d2f3f9ff833e8574cfd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-28_c8591fc737547d2f3f9ff833e8574cfd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-28_c8591fc737547d2f3f9ff833e8574cfd_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1440