cf1fa6d21f5317724aa46dcbab5ba5b7c20eefebe6eca9e1248f3b2a8e30fd6c

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/07/2026, 20:01

Target
2026-07-19_07b1600875cb42d494ab2fbf19b0aba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 3.7MB
Sample260719-yrmhyaay7k
SHA256 cf1fa6d21f5317724aa46dcbab5ba5b7c20eefebe6eca9e1248f3b2a8e30fd6c
MD5 07b1600875cb42d494ab2fbf19b0aba0
SHA1 5d5d381f4124a7e5fa15210f3d73453c263f46e0
SHA512 bc19387c859bd82a60740839e04f5b66abac6e9870556e9601f8379f61a36abcc75c49321555a226f9fae4d7b839fe4a7c6c24804a362191c1941b352e776865
SSDEEP 49152:JgqKIXzbYKIJ+XVccQBeQUkePqJvS+ZZIiwIlLCxjhoZ+5PlPOp/R/AKVo:JzbIJ+Fme5kePTiplWxjhoc5Ppu/AKy
TLSH
T1EF06230DD7E805F8D163E178895A4A03E776788D1721CB4F17A9679A2F373A0DE3A720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4076	2026-07-19_07b1600875cb42d494ab2fbf19b0aba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4076	2026-07-19_07b1600875cb42d494ab2fbf19b0aba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-19_07b1600875cb42d494ab2fbf19b0aba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-19_07b1600875cb42d494ab2fbf19b0aba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4076