3277ace1a79a191980c951d767ee595a4c583ab372d33b1d4cd0ec949f909fd4

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 09:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-27_2648f127c3bc671eb47d1b103034ff40_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 1.2MB
Sample260629-k4mskshx2t
SHA256 3277ace1a79a191980c951d767ee595a4c583ab372d33b1d4cd0ec949f909fd4
MD5 2648f127c3bc671eb47d1b103034ff40
SHA1 31a22e904988da754f2ae683fe16752dc835117f
SHA512 9fda80e25bcf1a65427a7f41b8beba5582f4dc93d69e7311e0263dac97717393fe8610f543368267d657ae1dd774c9d7df615467c72963e92435ae75450327b4
SSDEEP 24576:bDhW6nbuUm38cbtdvAfafSxWvr57k8ad511CC2r+nupn:bD46KUMJ9fdD54RAC2r+n8
TLSH
T18755D04272D525F9E177C6B888614A06E776BC250730ABDF03A072661F73AC19E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5768	BreadHack(rat).exe
1100	breadhack(legit).exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1260 wrote to memory of 5768	1260	2026-06-27_2648f127c3bc671eb47d1b103034ff40_cobalt-strike_icedid_njrat_satacom_stealc.exe	89
PID 1260 wrote to memory of 1100	1260	2026-06-27_2648f127c3bc671eb47d1b103034ff40_cobalt-strike_icedid_njrat_satacom_stealc.exe	90
PID 5768 wrote to memory of 5272	5768	BreadHack(rat).exe	91

C:\Users\Admin\AppData\Local\Temp\2026-06-27_2648f127c3bc671eb47d1b103034ff40_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-27_2648f127c3bc671eb47d1b103034ff40_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1260
- C:\Users\Admin\AppData\Local\Temp\exebind_1260\BreadHack(rat).exe
  "C:\Users\Admin\AppData\Local\Temp\exebind_1260\BreadHack(rat).exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:5768
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
    "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\BreadHack-5768.jar"
    3⤵
    PID:5272
- C:\Users\Admin\AppData\Local\Temp\exebind_1260\breadhack(legit).exe
  "C:\Users\Admin\AppData\Local\Temp\exebind_1260\breadhack(legit).exe"
  2⤵
  - Executes dropped EXE
  PID:1100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

BreadHack-5768.jar

Path C:\Users\Admin\AppData\Local\Temp\BreadHack-5768.jar
Size 805KB
SHA256 0813c10ac106376744ec06a82302caee2dec8c167a650bcf75ed072ea10d85a8
MD5 bd29debeb6773281d2e2135ee366f223
SHA1 40d17ad59d9270a58bb32c635cc2a1a297248168
SHA512 e61ba645944b5996e4e793814eac984b03e463b011f112aab6d88dd8893a435297225f0d41b8b2e3058209efd5cd9967cad5ca2e3eeca45834ef58e0fe43b2ad
SSDEEP 24576:iuUm38cbtdvAfafSxWvr57k8ad511CC2rj:3UMJ9fdD54RAC2rj
TLSH
T1180513417FC6D6B8D247D5F884284A123D0CC04DA12DF65722A898642FE2EDB2E5BFDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BreadHack(rat).exe

Path C:\Users\Admin\AppData\Local\Temp\exebind_1260\BreadHack(rat).exe
Size 943KB
SHA256 e6a92dc756770a93faa23bd9fd5c9dd8a4004ddd553ba9e3bb8d3405dcd62373
MD5 64d46bb2de7c5674375f1d4ad9e0bf38
SHA1 be23366936576c38fafb9a5ed5792b19c6324107
SHA512 911f160b6b2b36d00829936aca2ca44c6715b1a89959c2b3f589bb72bd3b1e0358d8ee4ccc8f48d166b56461adfd835c82403a9defb0ef3510da30282641c7c0
SSDEEP 24576:P6nbuUm38cbtdvAfafSxWvr57k8ad511CC2r:P6KUMJ9fdD54RAC2r
TLSH
T14325124377D5B1F8E163C6B884604A01AB15FC595324BBEB0394B0642FB3AC55E3BFA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

breadhack(legit).exe

Path C:\Users\Admin\AppData\Local\Temp\exebind_1260\breadhack(legit).exe
Size 217KB
SHA256 a9aaa8fb74393fa05d9aa4e2f39d358f91007f543e1aaddb5b9a82b4b0745fa7
MD5 3e6aff3a302a0497ae4cdbf2cc97444b
SHA1 f58320253dd2b6bbe2a9dc082e2fee882a262f04
SHA512 26adb723d9732ba4182eb6f2b1107d50ea63be850d88d129da7957e536b31cbe0e7f96485f0b829b4be530defd3a9498f87e8a6a9ac9969545914fb079ea10b0
SSDEEP 6144:TkRy3GF6h5U3LFC5sDue4M/BKkBgPxIupxsA3dSVO:4MU/NBupej
TLSH
T134243915B2E409F9E97BD6798DA24A06F6777C0507309ADF0390726A8F339D09D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5272-12-0x0000025BD9BF0000-0x0000025BD9E60000-memory.dmp

Download

memory/5272-21-0x0000025BD9A60000-0x0000025BD9A61000-memory.dmp

Download

memory/5272-24-0x0000025BD9A60000-0x0000025BD9A61000-memory.dmp

Download

memory/5272-25-0x0000025BD9BF0000-0x0000025BD9E60000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads