312cf69a48cc0302c20c9b27f73b263b0da29eb2674681773a9daa1f15b84f4d

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 08:41

Target
2026-08-03_fc6361ec7fd5604b46eff844e5585c38_cobalt-strike_icedid_njrat_stealc.exe
Size 395KB
Sample260803-klghvasaqf
SHA256 312cf69a48cc0302c20c9b27f73b263b0da29eb2674681773a9daa1f15b84f4d
MD5 fc6361ec7fd5604b46eff844e5585c38
SHA1 061805988da06c7b57236301cf852939a318651f
SHA512 b57a71599217d5a47ad28bada2e087f764ff531377a36ee65aa0b7a0af377157551bcec217e89113cb0101e0abe358df88fbc8e8120115a6719682ff9b0e6498
SSDEEP 6144:VcZY0BtNTeMZP1o8U3utUOowCf25lrvPuhDRZb4EmB0aNWlJjUr0wd:VG1PouKvervPuZE7Bz4fj2d
TLSH
T10A846C56F7A414F9E1B7D178C9624506EBB17C9A07B0D6CF13A8099A1F237D04E3AF12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3664	2026-08-03_fc6361ec7fd5604b46eff844e5585c38_cobalt-strike_icedid_njrat_stealc.exe
3664	2026-08-03_fc6361ec7fd5604b46eff844e5585c38_cobalt-strike_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_fc6361ec7fd5604b46eff844e5585c38_cobalt-strike_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_fc6361ec7fd5604b46eff844e5585c38_cobalt-strike_icedid_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3664