2f0176e70b4aa57352a9e5c14d67ffbd07aafc71a40e80e4696839687aed3d8a

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 05:07

Target
2026-07-30_a4a01739969c0bf6ec23d65cd774fba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
Size 479KB
Sample260730-fr9pcstvex
SHA256 2f0176e70b4aa57352a9e5c14d67ffbd07aafc71a40e80e4696839687aed3d8a
MD5 a4a01739969c0bf6ec23d65cd774fba0
SHA1 39b58abc7297976cc0f0285274136c3ddf063989
SHA512 5f9ff45ae25cd8b80d81a197f62b5f486669da955c789058fbe1f941a6313f263bfe93b6e45d2f353fc482d574662e8ceadd8b74cdfcb57c41de046da438090f
SSDEEP 6144:cTZ9HLKOtNQH7R38d1KeEbLuyWUJlgaNg/bAQ10AJbm:GeOXaRsdIeEHuRcgaNgf0X
TLSH
T103A49E19E7E415F9E067D178CE928902EB727C4E47719BDF23E059A61F272A08E3D312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3728	2026-07-30_a4a01739969c0bf6ec23d65cd774fba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
3728	2026-07-30_a4a01739969c0bf6ec23d65cd774fba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_a4a01739969c0bf6ec23d65cd774fba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_a4a01739969c0bf6ec23d65cd774fba0_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3728