5a825c4565a1f4f8d71050791e87b3a906c64528db17789050564148f7615ecf

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 20:42

Target
2026-08-03_a70e3c12667d77d3d6096cd6d4237d02_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 821KB
Sample260803-zhdecabm9x
SHA256 5a825c4565a1f4f8d71050791e87b3a906c64528db17789050564148f7615ecf
MD5 a70e3c12667d77d3d6096cd6d4237d02
SHA1 743b329bd2e1b5003dfd11e93505da1deed41d79
SHA512 d05652485c352026fe52c729dcea9c98ae65fd3ed093d00db1a39ca67ae961d9856f79739ea79365290e21c3ac841b4ed7a784a5aabe92d42e1bda481b9ae62d
SSDEEP 12288:P+cran8XScrdFWl1TPdALHvRRdsDUjTvhOMtMOE8Cb1YD:zran8XScrfO1yHnjhz/ChYD
TLSH
T135058D2A6B8401FCE076D179CE869D42EB72B80A03B05ADF07E085A65F775F45F3A712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2516	2026-08-03_a70e3c12667d77d3d6096cd6d4237d02_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
2516	2026-08-03_a70e3c12667d77d3d6096cd6d4237d02_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_a70e3c12667d77d3d6096cd6d4237d02_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_a70e3c12667d77d3d6096cd6d4237d02_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2516