abd9395809c1dfd3f1d52b14332947dda4beb0850e1008d2393795998732d827

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 03:15

Target
2026-07-15_197e78440380612afe3d1c2a7d12ca6e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 767KB
Sample260715-dsb4dadw2w
SHA256 abd9395809c1dfd3f1d52b14332947dda4beb0850e1008d2393795998732d827
MD5 197e78440380612afe3d1c2a7d12ca6e
SHA1 e8e957b401124b796f5807c9f3ae7168f8ef40c7
SHA512 afb3aafba320bed72fe2264b6769d89a57fddfe93faae3aca68227f5c83e26914b6fdb332f7a44e012dfea28ae550c5e82aac988b76070ea5cc2df876ed40cf7
SSDEEP 12288:CRJhT6krJ1ASaaRSKzHkRV8JUph0lhSMXl+HCZ1N6i3az:CLhTxrJ1ASaakKD0VVh0lhSMXlMCp6iU
TLSH
T158F4AD2AAAE441ECC57BC0BAC5620649FBB2BC9643506BCF139135672F736E85D3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4600	2026-07-15_197e78440380612afe3d1c2a7d12ca6e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
4600	2026-07-15_197e78440380612afe3d1c2a7d12ca6e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-15_197e78440380612afe3d1c2a7d12ca6e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-15_197e78440380612afe3d1c2a7d12ca6e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4600