67e576ab5f8d4935a7e3c1fa0b972bf8d8db83737c6f46f647d92eaafa34dfc7

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 11:30

Target
2026-07-12_cf35d0e5acb3ce80016eb9e802bba72d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260712-nma91aay2x
SHA256 67e576ab5f8d4935a7e3c1fa0b972bf8d8db83737c6f46f647d92eaafa34dfc7
MD5 cf35d0e5acb3ce80016eb9e802bba72d
SHA1 29a3ad09a53b7947992db5b7a3bb8853034a0b79
SHA512 75b9729e625ec4f1583605048125cf80ffbcc58c083a6896d39d2e6a704cfabf084034b2851c300cc7623b108732f385288f0bb06a628d0a86c07c00177bf5b5
SSDEEP 24576:QkG8bBWEPTgR0u/2eKeXrgJPZP6h0lhSMXlANr:QkG8bBWEPT40u/2Ve4hXg
TLSH
T1AF159E1AFB9901F9D07AC17889A66546F7B2BC46436057CF129136AA3F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4304	2026-07-12_cf35d0e5acb3ce80016eb9e802bba72d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
4304	2026-07-12_cf35d0e5acb3ce80016eb9e802bba72d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-12_cf35d0e5acb3ce80016eb9e802bba72d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-12_cf35d0e5acb3ce80016eb9e802bba72d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4304