2a78d36ebf2e196b8c3266ff58dc6e92c42fecd337d84f95e0babdcd8e597132

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 08:44

Target
2026-07-30_cbee7e8ae69af7efc9463792932d6ad6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 321KB
Sample260730-knmsmsee79
SHA256 2a78d36ebf2e196b8c3266ff58dc6e92c42fecd337d84f95e0babdcd8e597132
MD5 cbee7e8ae69af7efc9463792932d6ad6
SHA1 bacc85ce47d905ace542ba404c55cb196bacbb71
SHA512 cc9e8c505b33ce15c50e9d9a991c912efc28522b2b5a362c164a6c06744ea629e0f7ebce58a51cbf901e5aa3fc46eb9010e21184efc2c266e271da20bbff526d
SSDEEP 3072:8K6Ewyt5+wnyIv+mWOX4qte6JMpnovk0s2GSOIAI/5qvNuysJsSFiD8V4fN/5n97:1MEWosx2GSH/lZqFfasok
TLSH
T102644B4BAAA408F9CDBBD07D9842101AF97178E68360E7CB9395155B1F63BE4ED3DB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2044	2026-07-30_cbee7e8ae69af7efc9463792932d6ad6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
2044	2026-07-30_cbee7e8ae69af7efc9463792932d6ad6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_cbee7e8ae69af7efc9463792932d6ad6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_cbee7e8ae69af7efc9463792932d6ad6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2044