de13baed9b2b93a1c41a20e72dcc62036f0e2d430362220586c0f336816b56a3

Analysis

max time kernel
150s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 16:48

Target
2026-07-29_eb43de1394abee6d32afbaf61b5b9428_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260729-vbhy2abf49
SHA256 de13baed9b2b93a1c41a20e72dcc62036f0e2d430362220586c0f336816b56a3
MD5 eb43de1394abee6d32afbaf61b5b9428
SHA1 840e2e28499345e8a803b32c4187114bd124c819
SHA512 38fa79ec898ac0e552476f354d2775bdf2b95dd03b52febc5d960e0321786116bd94118ee3f4e41e1cd8def26b026bc90b69dc9c44eaaaf90461d59c0ea73b7b
SSDEEP 24576:sKzqRbUjf1jkRD+e2Tpa8/vTGh0lhSMXlFsa:sKzqRbUjf1oRZop9vJ
TLSH
T1C3159D1AEB9801F8D0BBC27989A22546F7B27C4657615ACF139135A63F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4060	2026-07-29_eb43de1394abee6d32afbaf61b5b9428_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
4060	2026-07-29_eb43de1394abee6d32afbaf61b5b9428_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-29_eb43de1394abee6d32afbaf61b5b9428_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-29_eb43de1394abee6d32afbaf61b5b9428_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4060