b8f81a25a8ddd561f640d6d3478b1e1584e9768b27c0b9defebcda7ad19d8723

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 15:25

Target
2026-07-10_27b768e493f7700629b6656b350cce97_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 321KB
Sample260710-st4mcaet7z
SHA256 b8f81a25a8ddd561f640d6d3478b1e1584e9768b27c0b9defebcda7ad19d8723
MD5 27b768e493f7700629b6656b350cce97
SHA1 6cf621385b807b5e4118341f0653174b93abf3da
SHA512 419e77aa7c10bd364247a84a50e1429183048ba654a7cdcd9b43995fb4ff503b01aeedbfe636bb35d147ed441f0773f240ec4ebe974fe36e61d4bde30ebcbccc
SSDEEP 3072:8K6Ewyt5+wnyIv+mWOX4qte6JMpnovk0s2GSOIAI/5qvNuysJsSFiD8V4fN/5n9x:1MEWosx2GSH/lZqFfasoG
TLSH
T128644B4BAAA408F9CDBBD07D9842101AF97178E68360E7CB9395155B1F63BE4ED3DB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
632	2026-07-10_27b768e493f7700629b6656b350cce97_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
632	2026-07-10_27b768e493f7700629b6656b350cce97_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-10_27b768e493f7700629b6656b350cce97_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_27b768e493f7700629b6656b350cce97_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:632