5c4c1378e5a1b54ec13802a6d186c9d0b7df9699d6966102acc707571da3843c

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 00:19

Target
2026-07-28_d2e53dd66932ec507a549810f5316180_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260729-al564azelb
SHA256 5c4c1378e5a1b54ec13802a6d186c9d0b7df9699d6966102acc707571da3843c
MD5 d2e53dd66932ec507a549810f5316180
SHA1 e64a23b0b6a17397f4c30fe548ddb329f041ee1e
SHA512 723540f94fbe3446d67c0412aaa701506efcb904158314eab336d4bbb9c6db200a81eec3ca2e4c6f7e4c668e9f3cbbb233ab925344544a8f2c46536043931926
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwu:n6dHLN0DHu/Rgvplod
TLSH
T196159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5824	2026-07-28_d2e53dd66932ec507a549810f5316180_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
5824	2026-07-28_d2e53dd66932ec507a549810f5316180_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-28_d2e53dd66932ec507a549810f5316180_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-28_d2e53dd66932ec507a549810f5316180_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5824