b3a445e1b913ca00b7589ac1ae3681112a8b421b9dbcd1fd71742fb91f90a395

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 11:53

Target
2026-07-20_3d5171948a08512f9beac31bccfd72bf_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 320KB
Sample260720-n2cflsg12r
SHA256 b3a445e1b913ca00b7589ac1ae3681112a8b421b9dbcd1fd71742fb91f90a395
MD5 3d5171948a08512f9beac31bccfd72bf
SHA1 7b472b9cd6f4c646446bd8f14c17b8ba67f68560
SHA512 37863d03164a23f406eddee5c99623c4c12317d8cf87d399473c954270ced125473cb7b33e43764212d0491e71a24404ffb61a690cd24178d7510d491878f520
SSDEEP 3072:OAHNSduf+LnpIP+I+t7RJDwg2cITRU700M+4eYH6KUs5uJsJsKFiN/Nksym+q/CC:zwMJvFU4h+4eQR6VK0Kas3/S
TLSH
T16A643A4BAAA448F9CDBBD07D9942101AF97178E68360E7CB939116471F63BE4ED3DB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6084	2026-07-20_3d5171948a08512f9beac31bccfd72bf_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
6084	2026-07-20_3d5171948a08512f9beac31bccfd72bf_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-20_3d5171948a08512f9beac31bccfd72bf_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-20_3d5171948a08512f9beac31bccfd72bf_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6084