9fa1a7eb13b77c2613255f5eb1d58ef5106f88fdf3fbc8115822d677c476e3f2

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 01:03

Target
2026-07-06_c60b19c6cd9ad42d3ebf69e926e32341_amadey_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar.exe
Size 1.7MB
Sample260707-beldsabz2n
SHA256 9fa1a7eb13b77c2613255f5eb1d58ef5106f88fdf3fbc8115822d677c476e3f2
MD5 c60b19c6cd9ad42d3ebf69e926e32341
SHA1 0b805c14d7d138092a539e9f7940429666fc4e58
SHA512 cbcd55e91300db3f46feb7824d7df6dc4734bf05f126b19734bd1a9418f712cdcefe8ea87195dad140b111adafbfa11bd9bb099cc2e3bc3ce1768577ac495a3b
SSDEEP 24576:rRXDJ0r/SVlxWOqDUD0Le5ji0hmxNrMfDIiukOiFOPfepJ12eCtsO8e7zYB:rucx7aAPji0AjygA2eQJa
TLSH
T13D855B16B7F843B1E0B39578C9A6925ADB727C520B3086CF4394976D1E336D18E36B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1540	2026-07-06_c60b19c6cd9ad42d3ebf69e926e32341_amadey_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-06_c60b19c6cd9ad42d3ebf69e926e32341_amadey_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-06_c60b19c6cd9ad42d3ebf69e926e32341_amadey_cobalt-strike_glassworm_hijackloader_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1540