3586fc10b492f7e0923e6d8db44d0f6abb184b4a86120d94e47cef93e6cf65bb

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 10:21

Target
2026-08-01_f732feab7d71a07b2d5fb447fc43403f_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 825KB
Sample260801-md26pasema
SHA256 3586fc10b492f7e0923e6d8db44d0f6abb184b4a86120d94e47cef93e6cf65bb
MD5 f732feab7d71a07b2d5fb447fc43403f
SHA1 12c00e84a77622a5100d4c69eebbfe49a73e18b1
SHA512 835e372e36100b43b261584c02f473d7489232d9a1e91a384a1f1a5ac90a9f2cb2ba67263f4f91b3ec13a42a91380e21b1bd685de523f5d327371283c6ab6b1e
SSDEEP 12288:22obxQJ7jnw7hAow0iYCrBwSq00dlCPF9vtB2RE9LprVTZ8GqR:W6J7jnw7hAowBdradUtBW2JN
TLSH
T165058E266B9401FCE0B7C179CE869D52EB71B80A03B05AEF07A085A55F376F45F3A712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2580	2026-08-01_f732feab7d71a07b2d5fb447fc43403f_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
2580	2026-08-01_f732feab7d71a07b2d5fb447fc43403f_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-01_f732feab7d71a07b2d5fb447fc43403f_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_f732feab7d71a07b2d5fb447fc43403f_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2580