2aee0add1f0d06454bc9c43cedf4989cef84a319833e1874310902ac9a246c38

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 13:01

Target
2026-07-12_61815423e9ecb5b05fcb3e08bb39e214_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260712-p9fnnscs8v
SHA256 2aee0add1f0d06454bc9c43cedf4989cef84a319833e1874310902ac9a246c38
MD5 61815423e9ecb5b05fcb3e08bb39e214
SHA1 e450867741cd176932a80b00690fbda59132e05f
SHA512 6a2c0b27f8fbe41b92783d408a55fb64f0fc7576a98eb78b4ebc715c68b98abfcfd724d96089699cecbc7b1dd7f01f8a1b41e7d391e2adf2d5121d219a4d4eb9
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwT:n6dHLN0DHu/Rgvploo
TLSH
T1EF159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
828	2026-07-12_61815423e9ecb5b05fcb3e08bb39e214_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
828	2026-07-12_61815423e9ecb5b05fcb3e08bb39e214_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-12_61815423e9ecb5b05fcb3e08bb39e214_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-12_61815423e9ecb5b05fcb3e08bb39e214_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:828