e87266f5daa6f446a0d35447d5062045d723427724d4b9a3a395299dfb5e2e3e

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 17:29

Target
2026-07-08_8914563d7481e84a0b65712647ddd93d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 282KB
Sample260708-v2h2qaex2s
SHA256 e87266f5daa6f446a0d35447d5062045d723427724d4b9a3a395299dfb5e2e3e
MD5 8914563d7481e84a0b65712647ddd93d
SHA1 e13d6a885c0a4b174c31d7e4f410776af111c9ed
SHA512 d52d8bd8bdf1f40b9dc51991fc251956cfb9fcb2fb5e9c635ab5fe12c7a92e2515a3b66de31c71c9227f131d9c4a4b43633827ffeb5f043c879a2cb3e94a29b1
SSDEEP 3072:Y13u+noxXlf2P1lpx+nM3cPlnPPIOO9Q86wE0ml/hjz12AR/u2rOe8jSMwfStT3Y:9P5U6htJajGMOD1hG
TLSH
T14554391AB6A524F5E9BBC03DC942650AF97278A24770D7CB57A04B971F23BE09D3DB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4840	2026-07-08_8914563d7481e84a0b65712647ddd93d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
4840	2026-07-08_8914563d7481e84a0b65712647ddd93d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-08_8914563d7481e84a0b65712647ddd93d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-08_8914563d7481e84a0b65712647ddd93d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4840