121921114212b64a52ed46e0ee9e91aff77ec432290c64a42e6d02e355dd6679

Analysis

max time kernel
150s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 01:47

Target
2026-07-17_dd4ffb51c91fa30c2862a0c5dcf0521d_akira_amadey_cobalt-strike_glassworm_icedid_luca-stealer.exe
Size 16.7MB
Sample260718-b7vsxsct5j
SHA256 121921114212b64a52ed46e0ee9e91aff77ec432290c64a42e6d02e355dd6679
MD5 dd4ffb51c91fa30c2862a0c5dcf0521d
SHA1 e0ed08681a96deb148394f5d79e9dbe86ef16eb0
SHA512 940ca43a7e3fcbca3100aa92bb56e8e38f2aa2d9c5ac92dbf6b243f364005d31e6060413b2f1355ba4b7c719da102270932e774c9dadf51f8e395ef919d734d5
SSDEEP 98304:j4c02X6I79NDsmoEAH2KWza5UduNwCF+D8WpGUE2MYhYR44lvdJK/LlNMPm/rm5L:gwfjMfWlsOl4T+hYR4AKDRV+it1CNhWO
TLSH
T1C4078C07F26681BCC066C075C656A623FB72B84A073066EB37EC4A353F67BE05A39715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4284	2026-07-17_dd4ffb51c91fa30c2862a0c5dcf0521d_akira_amadey_cobalt-strike_glassworm_icedid_luca-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-17_dd4ffb51c91fa30c2862a0c5dcf0521d_akira_amadey_cobalt-strike_glassworm_icedid_luca-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-17_dd4ffb51c91fa30c2862a0c5dcf0521d_akira_amadey_cobalt-strike_glassworm_icedid_luca-stealer.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4284