46d93764464f3a6a4378dd24e3f5215c86112f54654c218ba1888285870866f9

Analysis

max time kernel
150s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 18:20

Target
2026-07-23_f98ecdc16c12a6fd87761f3547f25e52_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Size 10.4MB
Sample260723-wysmesvaqf
SHA256 46d93764464f3a6a4378dd24e3f5215c86112f54654c218ba1888285870866f9
MD5 f98ecdc16c12a6fd87761f3547f25e52
SHA1 0614fdddc6b896ad40163e0f8ee543f984cb1d0d
SHA512 8c4dba10017ddad734fd7dee7a092a3842437ae8e6e5aa00032d6c4b209a0b50a7a05b4bf709dd3e68e78687a47ab2cc3795332cae64b137b5d21ae2b4715487
SSDEEP 196608:93GpSdasI7bwwVc7Q2WHVaaB19lPEQHNW0YXggdplgRisDxpZ4LkGqj66NmkJ1eK:p5EarW0aB1rPhpYQaaRiQXZ4oDZJoi4C
TLSH
T178B63355E3E808EDD5A3A138CE474C42F7397C4D1B209BCB1BB5461A0F6B7E49E6A321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4864	2026-07-23_f98ecdc16c12a6fd87761f3547f25e52_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
4864	2026-07-23_f98ecdc16c12a6fd87761f3547f25e52_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-23_f98ecdc16c12a6fd87761f3547f25e52_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-23_f98ecdc16c12a6fd87761f3547f25e52_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4864