b274973791d71f81b9c0db5a37725f9733ff6b6d9062d5f4005d09682a582c52

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 09:48

Target
2026-07-30_c260a9eef63a7c4c640168c02900e619_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 320KB
Sample260730-ls7jaafc77
SHA256 b274973791d71f81b9c0db5a37725f9733ff6b6d9062d5f4005d09682a582c52
MD5 c260a9eef63a7c4c640168c02900e619
SHA1 4686d156ea18935b04d731ceb1f516e06f943969
SHA512 b490282d4365a53aee68ab4454058f672dd0ae7d4a1823820087ee6886b8436899806ff7f2bf5d79b1932ac6a049324ea5869578bf9b23930c8db48338099a95
SSDEEP 3072:iAHNSduf+LnpIP+I+t7RJDwg2cITRU700M+4eYH6KUsquJsJsmFiA/Nksym+q/Cw:vwMJvFU4h+4eQQdVK0KasI
TLSH
T1F1643A4BAAA448F9CDBBD07DD942101AF97178E68360E7CB939116471F63AE4ED3DB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3504	2026-07-30_c260a9eef63a7c4c640168c02900e619_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
3504	2026-07-30_c260a9eef63a7c4c640168c02900e619_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_c260a9eef63a7c4c640168c02900e619_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_c260a9eef63a7c4c640168c02900e619_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3504