3a845a1ba5d112ccbc0006214acbe57fe70bd4133d883a91d8e79a8eb861be67

Analysis

max time kernel
150s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 16:54

Target
2026-07-12_6e7388c69db29c27cab4c996cc86a3f9_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Size 12.1MB
Sample260712-vey5esdx4l
SHA256 3a845a1ba5d112ccbc0006214acbe57fe70bd4133d883a91d8e79a8eb861be67
MD5 6e7388c69db29c27cab4c996cc86a3f9
SHA1 a5998f974ce564a9f90dd1fba06306a44c7e2908
SHA512 e29070e383d6328469094b865d5ad93902aa0f4571b13adc615cc0c075cb0bb111f18faaf7c4783c1f09826b8d4c8e4a1dee08864a0f1df5bf5100b5c8986e19
SSDEEP 196608:oVIOAJUc9v+SJlIIQygMiBNfi6bvjML0g1OXCn9e:oI7Ubbvjs0cOynY
TLSH
T18AD6C50267FC0444F5F3A738863A98669A37BC761B34EACF11582C5D0B33E919976B72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1196	2026-07-12_6e7388c69db29c27cab4c996cc86a3f9_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
1196	2026-07-12_6e7388c69db29c27cab4c996cc86a3f9_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-12_6e7388c69db29c27cab4c996cc86a3f9_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-12_6e7388c69db29c27cab4c996cc86a3f9_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1196