497a99ccff6170576be28939f1b1288a0029c851f6ac3cf71d45846e5a26c2a1

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 09:01

Target
2026-07-18_0505d435e50fc8e8cecfe4660230c1eb_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 147KB
Sample260718-kywtashy81
SHA256 497a99ccff6170576be28939f1b1288a0029c851f6ac3cf71d45846e5a26c2a1
MD5 0505d435e50fc8e8cecfe4660230c1eb
SHA1 b6a115692d487af34f85b5b9c1d873ee215a7257
SHA512 3eaacbbef6c009e482648dd1b2e133f43609b28471db9df5a0924f0f535a5bb170287c31abfdcc9b875aaf2c18b92c8b3e7a588cee7284e682e7e0ca4cfc8a00
SSDEEP 3072:kf8ZMNUmZVI/nPR4HTTzSu6DqtHXBeBeLHPEWdIW:kfjUmZVI/nZ4H3zd6utHXBDHhm
TLSH
T198E37C57B3E430F9E5B79235C8650A4AEB72783607209B5F07A407762F232919E3FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3896	2026-07-18_0505d435e50fc8e8cecfe4660230c1eb_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_0505d435e50fc8e8cecfe4660230c1eb_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_0505d435e50fc8e8cecfe4660230c1eb_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3896