6d16a764267a91a5d7827ebdd6e49d1d9e0fc989f76cb4afbd7ab79018da78fc

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 01:48

Target
2026-07-05_22bbaa4b4cda1e8125e14bfd855d8959_cobalt-strike_icedid_ryuk_satacom_stealc.exe
Size 437KB
Sample260705-b8cczab16k
SHA256 6d16a764267a91a5d7827ebdd6e49d1d9e0fc989f76cb4afbd7ab79018da78fc
MD5 22bbaa4b4cda1e8125e14bfd855d8959
SHA1 9cbb5a555b91167c7e05db723563120d92f2415b
SHA512 0c6324af3c98ce64420ef15c387151d9110aa23176a99434b9603e62f3db407ea628f91ac6996851fb4093a1af47ce74e32eeaa488d73393990ecd0b2f35be2b
SSDEEP 6144:lHyNFCZ2717KgjiSCM1xKaQCHCMoyzwjQprZph0lhSMXlBXBW+LlFq:sNYsuIiPYiMoyzwjQprZph0lhSMXldS
TLSH
T17894AE86B7D185FAE21A8274895B1A91EA33BC1447406BDF43A4DF711E736C29F3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6524	2026-07-05_22bbaa4b4cda1e8125e14bfd855d8959_cobalt-strike_icedid_ryuk_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-05_22bbaa4b4cda1e8125e14bfd855d8959_cobalt-strike_icedid_ryuk_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-05_22bbaa4b4cda1e8125e14bfd855d8959_cobalt-strike_icedid_ryuk_satacom_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:6524