343f1741ff45b666316a952c669f867988e4de973e87979d207c8bb9dbb1bc71

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/07/2026, 13:19

Target
2026-07-13_5f36e8ccf1fd8b94dfa77763214bed7a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260713-qkmlcsb16w
SHA256 343f1741ff45b666316a952c669f867988e4de973e87979d207c8bb9dbb1bc71
MD5 5f36e8ccf1fd8b94dfa77763214bed7a
SHA1 270938f1499399560a3a44442065c67ff90749a4
SHA512 40cfcc57c90a7a9001840c9d01a2f5a4e517c955179778a5a19d329638c40b300590ba769b64cf83ea9134eef8f290190f4910a9e2da0f1d1b05cf83b63afd30
SSDEEP 24576:sKzqRbUjf1jkRD+e2Tpa8/vTGh0lhSMXlFsh:sKzqRbUjf1oRZop9vW
TLSH
T1A3159D1AEB9801F8D0BBC27989A22546F7B27C4657615ACF139135A63F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1784	2026-07-13_5f36e8ccf1fd8b94dfa77763214bed7a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
1784	2026-07-13_5f36e8ccf1fd8b94dfa77763214bed7a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-13_5f36e8ccf1fd8b94dfa77763214bed7a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-13_5f36e8ccf1fd8b94dfa77763214bed7a_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1784

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5508