ea8c1492a9c5e9d2b28c46c72e3c71b11958bad68009480187529110a8cdc4c9

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 15:42

Target
2026-07-22_73f0f784bbed314c9b52f56d0c33afb6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 458KB
Sample260722-s5txaayaka
SHA256 ea8c1492a9c5e9d2b28c46c72e3c71b11958bad68009480187529110a8cdc4c9
MD5 73f0f784bbed314c9b52f56d0c33afb6
SHA1 bc6251fabd061b5602d46f2ce5764966d7019541
SHA512 9ca440e8eae638662b8021bbe1bfc8fbbe03032aee85fd3b7e732effbd6ac501c95461588ac58a4c173d90cdcb7ef3e10087ffbb68882d49bc9f1df33d4e6754
SSDEEP 6144:JjG5JbCTfht4i041zCoSLUZBj+w1z6HIbYaXMnaKdJJle/IykqdKYIufQx9:6UTfQdzAZRrAH6KndJlH6d7p
TLSH
T1DAA47D15A6A900F9E077D27CCE538902EBB278560371DACF03A4E6762F276D45E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
740	2026-07-22_73f0f784bbed314c9b52f56d0c33afb6_cobalt-strike_icedid_njrat_satacom_stealc.exe
740	2026-07-22_73f0f784bbed314c9b52f56d0c33afb6_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-22_73f0f784bbed314c9b52f56d0c33afb6_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-22_73f0f784bbed314c9b52f56d0c33afb6_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:740