c2f5dc622d589b2c63ad0fdc9cadd5f50ef7dbe48e78ca1864d5c26fb494f19a

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 08:51

Target
2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc.exe
Size 531KB
Sample260730-ksbwyavbmd
SHA256 c2f5dc622d589b2c63ad0fdc9cadd5f50ef7dbe48e78ca1864d5c26fb494f19a
MD5 855cc742e942fee2df057b0e4ce34bea
SHA1 bfea3fae0cc9bb3faabb7f718fdebea5ea8893e4
SHA512 79bb4574336bb5d4219c0c2b66e1fda28e8bb817b28e0d8ce7e9518f33dcc5f6b43d594b0fadd4278318f8621659125c5c32f2ec2b862fabc662abd6ac34c046
SSDEEP 6144:MuiFOcdLQ4QebNouP0o6nq/+ZkO4riNVTrJIduapSZ6IXDAOl8anDAhFHnp909qJ:2O3exoaWnW/QVVZ6IzTSaDqnp90Piqvm
TLSH
T1D7C46E56F7A943F9E177C134C5929603EB72788A033499DF13A0897A2F136E19E3D721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5320	2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:5320