dd950203f667b830cd8dd6afe7e243bbde35c63ce0f69a3d0bcec2385922b304

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 11:47

Target
2026-07-02_40acb78590a170a150d81606dcf40330_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260702-nx1yeahs7t
SHA256 dd950203f667b830cd8dd6afe7e243bbde35c63ce0f69a3d0bcec2385922b304
MD5 40acb78590a170a150d81606dcf40330
SHA1 43f505f5f140ceb8d601fcc04fb4a6e347501320
SHA512 c9162aebed86dfd14bf22c8a2c0f3bcaa2a9cd8ca4f732cd38b1fdcf88078ef2b0b948caab1060cd4c13a7a008091b26755776b5ef28438521de10ee89e00d31
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwb:n6dHLN0DHu/RgvploI
TLSH
T1A0159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6020	2026-07-02_40acb78590a170a150d81606dcf40330_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
6020	2026-07-02_40acb78590a170a150d81606dcf40330_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-02_40acb78590a170a150d81606dcf40330_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-02_40acb78590a170a150d81606dcf40330_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6020