4cafde3c192c32399a00cfcc0e5c9b234c151d81e35323cbaa3de203925c925f

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 00:36

Target
2026-06-30_13d66d5007db9b02ce8f506713f9412e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Size 6.4MB
Sample260701-ax8rcsds2x
SHA256 4cafde3c192c32399a00cfcc0e5c9b234c151d81e35323cbaa3de203925c925f
MD5 13d66d5007db9b02ce8f506713f9412e
SHA1 f9ac93961f912acd7131182646f437c408f00c70
SHA512 980702818f91ad9eff053a20e031625750edca479660cf0bf680dd99b561e6ebdfc711c72652c977e65e4323659900f523d942a5e5e5c83ef7f61fb654604a7b
SSDEEP 196608:zDLbev3Ya7JMShCkx/XfIqCCCtZvqwe60lF:zHbUL60l
TLSH
T16766AF06BC9E50B8E072E7BAD95F4E17EE76B804032019CB67C453551F37BE84A3BA46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3516	2026-06-30_13d66d5007db9b02ce8f506713f9412e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
3516	2026-06-30_13d66d5007db9b02ce8f506713f9412e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-30_13d66d5007db9b02ce8f506713f9412e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-30_13d66d5007db9b02ce8f506713f9412e_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3516