edfe54fc031bc522856bffc9297c3246f2da70a50aef05a70af08b8eedfdf655

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 19:12

Target
2026-06-28_c6e014fa93880eacf7cf80553d57d635_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 1.9MB
Sample260628-xwtmdacs2y
SHA256 edfe54fc031bc522856bffc9297c3246f2da70a50aef05a70af08b8eedfdf655
MD5 c6e014fa93880eacf7cf80553d57d635
SHA1 6a52508a08a6e9197de7550f7b789fd00fa6796f
SHA512 94b509398a312918b304412def6790d73843907502e18f7473999d3d82137063a86508c1c10ffaddd03f481220b93babef8270cf645196ab9df2c1b486cc3b54
SSDEEP 24576:WVrCu21zLO/oREuHkbcjiWcXjswCGqSUnKiY8SOWbZZZlj5AVXXwLBkfRJ:YCu2pVREMkbjswpunTY8SOUkmQ
TLSH
T19F95BE06F36681ECC227D5B8C6939707E7717824476486EF67C00A6ABFAB5D09F7A340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1180	2026-06-28_c6e014fa93880eacf7cf80553d57d635_cobalt-strike_icedid_njrat_satacom_stealc.exe
1180	2026-06-28_c6e014fa93880eacf7cf80553d57d635_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-28_c6e014fa93880eacf7cf80553d57d635_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-28_c6e014fa93880eacf7cf80553d57d635_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1180