bcf723e252b69a8fc987da8af7b3e842901e495cb4d68c1266c1a4192d4c48cb

Analysis

max time kernel
150s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/07/2026, 23:24

Target
2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Size 18.1MB
Sample260726-3dzcsssfpb
SHA256 bcf723e252b69a8fc987da8af7b3e842901e495cb4d68c1266c1a4192d4c48cb
MD5 8cc43a18fa0f2f1c9db0062b39def64a
SHA1 e5eca8f1520b887eacb85e912f284c890ac5c297
SHA512 83a0581cc218ba7bf05db7c5e02eaab0e308ae3d5b5a6277e23dfc04a470dfbfd8bf1df0a083b92542645d1a5f6308fed15fe931a5b02be4c555e627793470b7
SSDEEP 196608:ibszrBhlqQI44eE3LhVZLKlnhYZjCDoOJ:PthlqvhLhVoYZj01J
TLSH
T1A7177C72E1A480C8D076E078CA168467E6B2BC51433197CF269D7A1B2F3B7E05E7E761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4148	2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc.exe
4148	2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-26_8cc43a18fa0f2f1c9db0062b39def64a_blankgrabber_cobalt-strike_glassworm_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4148