bb68023da84306a24cee883c6a83e0af31132dc8717794a2bf56e0d7978cb617

Analysis

max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 04:24

Target
2026-07-21_0872e61e40258b5b65658ddf79bc091e_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Size 199KB
Sample260721-e1f8qsez4k
SHA256 bb68023da84306a24cee883c6a83e0af31132dc8717794a2bf56e0d7978cb617
MD5 0872e61e40258b5b65658ddf79bc091e
SHA1 53494da57340d09362656567e3087eafe9b91a43
SHA512 db7e63e1bed9c69bdb20443e113aa5d41f29c3d30e5644a78e85f6eea6e50c8e7a494294547215c6578181c7fdcd6dc3e77975ca74f87e3df82307be71e8bdff
SSDEEP 3072:m9rpJlObo9MFdSb39fmp2JJmJg1lzulqlK3AJGJGrSoj:8t2FG39GKHKlKlS
TLSH
T1EF148D5AB3D600F9E0A79138CD919506F6B3782507209AEF43E44775AF233D0AE3EB56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4496	2026-07-21_0872e61e40258b5b65658ddf79bc091e_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
4496	2026-07-21_0872e61e40258b5b65658ddf79bc091e_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
4496	2026-07-21_0872e61e40258b5b65658ddf79bc091e_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
4496	2026-07-21_0872e61e40258b5b65658ddf79bc091e_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-21_0872e61e40258b5b65658ddf79bc091e_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-21_0872e61e40258b5b65658ddf79bc091e_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4496