68454e2bf5b339917b2b71da31853bbe6cbda1185c6ee2bf4ea2ba965463e63d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 02:45

Target
2026-07-29_5f04a65feb13fe39d9ec94cd766d877d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 506KB
Sample260729-c87pjsvvcw
SHA256 68454e2bf5b339917b2b71da31853bbe6cbda1185c6ee2bf4ea2ba965463e63d
MD5 5f04a65feb13fe39d9ec94cd766d877d
SHA1 91a4c589b40ce3301c4b629c425a0fa07db3ad56
SHA512 bfd1de02172927e94d4853e5aab1212d1233c17b9e1214af5b045f117654b7a080e71dab9181947852484b4b37b5f953a1182284ef483049be6544d55601ee8f
SSDEEP 6144:yWX76nCxqLCUeppGlxmEe4rvT2emp4dSinMzbMzlHA7/tsE0MA0pgwbyuybN98:yWX76V/PhHhMzuZe1sE0t0tGuse
TLSH
T188B48D26A66804FCE167D1B8CE164D03E675784A0330EADF03D49AB61F276D49E7EF12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
556	2026-07-29_5f04a65feb13fe39d9ec94cd766d877d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-29_5f04a65feb13fe39d9ec94cd766d877d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-29_5f04a65feb13fe39d9ec94cd766d877d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:556