3c6a07cf507a3a25425e1108b442cee128949b81cd8dcb874c47d089b7a01ff1

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 15:48

Target
2026-08-01_cdf3d19f8b03ddc71ada7073270918f9_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 13.0MB
Sample260801-s8223ach94
SHA256 3c6a07cf507a3a25425e1108b442cee128949b81cd8dcb874c47d089b7a01ff1
MD5 cdf3d19f8b03ddc71ada7073270918f9
SHA1 92647ac0cd2165a830dfbe902a816dabe6472a67
SHA512 bcf3f26b9fc7d751974676356004f63021b32484e4de048b231d6c3c07467faa777d21322bd8b4fdc87877c237d88496dcd871f311715394697eb4ec10ab4cdd
SSDEEP 49152:exrhrzPYGToY8njQ3GQyC2e2KCWJFON/dKNsWs7YZY/8XWatC5hfnu0nkSsKmxN8:Gztyao3sKyao3s
TLSH
T136D6E716B6FA11D1D1BAC0399503562BED70309A433C92FFA38589C56B707E8EE7CB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
6292	2026-08-01_cdf3d19f8b03ddc71ada7073270918f9_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-01_cdf3d19f8b03ddc71ada7073270918f9_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_cdf3d19f8b03ddc71ada7073270918f9_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:6292