32101f091499086753d1f94ddf0e3d87503da533f15f4e3c3bfd20d72662aa2d

Analysis

max time kernel
150s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 06:02

Target
2026-07-23_09870d615d1dbf61446200054e74b3a1_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Size 1.5MB
Sample260723-grnbssha73
SHA256 32101f091499086753d1f94ddf0e3d87503da533f15f4e3c3bfd20d72662aa2d
MD5 09870d615d1dbf61446200054e74b3a1
SHA1 1ccc3a0644dc4e4c1ff495811eabf9fbe83b7007
SHA512 ffe2f3f568ea3a492791301483b3fb6b423226089fee9b48bf9ce762dcf1904490226153db6723b4280c21873e124401d45460cfceee99dadf0769f2dcf75d2b
SSDEEP 24576:IEpg0Dg+aNvkAYnPOv1eE72LZnBvaUi8nhDFj0pVm4Gie+O93l0fZa:lpBTAYnPiVqhxah8nh5jR+O93+x
TLSH
T1B675AE47A2B910F9D0ABC178C6429617E7B2785913209BDF03E08A792F737E16E7E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2680	2026-07-23_09870d615d1dbf61446200054e74b3a1_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
2680	2026-07-23_09870d615d1dbf61446200054e74b3a1_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-23_09870d615d1dbf61446200054e74b3a1_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-23_09870d615d1dbf61446200054e74b3a1_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2680