91df219ced8f6df488c133b7c74f04412509dca8d88234f95eacb58bfafbcd24

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/07/2026, 04:31

Target
2026-07-16_3d938e37e547736f05fd762dc28a8170_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 6.8MB
Sample260716-e5m7vac16j
SHA256 91df219ced8f6df488c133b7c74f04412509dca8d88234f95eacb58bfafbcd24
MD5 3d938e37e547736f05fd762dc28a8170
SHA1 53d9386a207a80257b1ba9e2f850fb218c985dc2
SHA512 ac0ed26823df638fad848fbce1c396b1ac1455e04036d356530d3158ba2be05af6531cb095cbe518f7356acc599bf0fbe2fda9e1c00a39be8e1806030f553f73
SSDEEP 196608:JzcQ5p7JmQAQV+s8gtUufRpqoUTwF+uJaSP7xORMEpen:oQAYZffAuJaSP7xORMEpI
TLSH
T11266330AE6E445F8E0B7A5B89D670903E276BC4D0F61D74B17B9A3563F231909F38B21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2740	2026-07-16_3d938e37e547736f05fd762dc28a8170_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
2740	2026-07-16_3d938e37e547736f05fd762dc28a8170_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-16_3d938e37e547736f05fd762dc28a8170_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-16_3d938e37e547736f05fd762dc28a8170_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2740