ab620c72bfcda430d6385578ae3538bb0087a7abb791fa7bc17c2f4b446bfd1a

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 02:34

Target
2026-07-29_a905512ab92a3c733ba7a22cac3d2642_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 506KB
Sample260729-c2d4navsgv
SHA256 ab620c72bfcda430d6385578ae3538bb0087a7abb791fa7bc17c2f4b446bfd1a
MD5 a905512ab92a3c733ba7a22cac3d2642
SHA1 c766990933303a1cb48777554d9513a44fb0468b
SHA512 ef5d57b590bb261e8eb41793b8f06dec827e36d9e1597339a94c150aa01b848ec82c4ad8c957fac6ee1aacc9dcb4a13de0161246b7f47275f2afefef28472978
SSDEEP 6144:dWX768QxqLCUeppGlxmEe4rVt2Ump4dSinMzbMzlHA7ThDE0kA0pgwbyuybN98:dWX76Y/1BHhMzuZeVDE0l0tGuse
TLSH
T173B47D26A66804FCE167D1B8CE164D03E675784A0330EADF03D49AB61F276D49E7EF12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
4568	2026-07-29_a905512ab92a3c733ba7a22cac3d2642_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-29_a905512ab92a3c733ba7a22cac3d2642_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-29_a905512ab92a3c733ba7a22cac3d2642_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4568