815e627ba876931914d347df7eadc517f24612f5b4009f4e398c823b79f4cabb

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 04:14

Target
2026-08-01_4bcdc504b42854fdca5011d4655ad24b_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Size 1.4MB
Sample260802-etscesch55
SHA256 815e627ba876931914d347df7eadc517f24612f5b4009f4e398c823b79f4cabb
MD5 4bcdc504b42854fdca5011d4655ad24b
SHA1 d9ffe54bc9242185181861b2019f81bb9385b137
SHA512 fa5acf0e84e83ea52de2b71452c2842738eb7c541d0820d76bd579b446f5af8b91bb590ab53aee2cdbc6dd4024c33212b006d2c54cbfda4dbfaede9565faaef6
SSDEEP 24576:b65aAFyVNX9dDEcWd4FneIq9Ba+lW6KnyetsiZngiGA+O93l0fZm:b6FFgFLXFkQbR1tJZngi7+O93+xm
TLSH
T18B65AE4773B551F9D0ABC078C642960BEBB2785513209AEF13E09A682F736E12F7E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4632	2026-08-01_4bcdc504b42854fdca5011d4655ad24b_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
4632	2026-08-01_4bcdc504b42854fdca5011d4655ad24b_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-01_4bcdc504b42854fdca5011d4655ad24b_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_4bcdc504b42854fdca5011d4655ad24b_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4632