fd1013cb723a40d663f228324e6d95267df3588b697f2f670cd435f2bf05723e

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 10:59

Target
2026-07-18_7ebde1fc5fbf80aaa06e23c258ec9563_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 42.0MB
Sample260718-m3xmhacv21
SHA256 fd1013cb723a40d663f228324e6d95267df3588b697f2f670cd435f2bf05723e
MD5 7ebde1fc5fbf80aaa06e23c258ec9563
SHA1 af69dbebf3bbf5ba203ef4953c0bbc98f12ea5b0
SHA512 2f18e8efa9f3657ae52ae3e548d1af725c57da637a1a258772037bd77dcc50b250b046736bda7fa3b89709c28b599dca56117d866d7c0b99d64963d665c1a31c
SSDEEP 786432:aXeOAR0hqFpM75ZXM92eF9pmrjWUJlWdpCBliHGjnPzgMeAyFgEU6HiCW/:AeTKYOgseF9pvilWdpCBl8iHetx9q
TLSH
T1FCA7331CF6D400F8D405F8388ED30959E6BDF89A0B659EAB17A937139F076E01D78B62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4472	2026-07-18_7ebde1fc5fbf80aaa06e23c258ec9563_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4472	2026-07-18_7ebde1fc5fbf80aaa06e23c258ec9563_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_7ebde1fc5fbf80aaa06e23c258ec9563_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_7ebde1fc5fbf80aaa06e23c258ec9563_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4472