0a58294ed1f7b10ef1e988a38beea257f2851b8b64b0f9f589b26fe849f89a72

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 09:06

Target
2026-08-03_ec5e30702a08c131c5cac7d862b7a295_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260804-k2rczsgf26
SHA256 0a58294ed1f7b10ef1e988a38beea257f2851b8b64b0f9f589b26fe849f89a72
MD5 ec5e30702a08c131c5cac7d862b7a295
SHA1 96bafce529bfa9a750193a1722c12e92fce22185
SHA512 31d84b469b702e65bf6a8a6d6a3698c2f7fd540f1a376cc97f5ab1c7e7083ff8f7be9a959baff6ef119464d83c5db024cbbf7d8bcd0b0feda07244d9bb84ed3b
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwS:n6dHLN0DHu/RgvploB
TLSH
T1F6159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4232	2026-08-03_ec5e30702a08c131c5cac7d862b7a295_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
4232	2026-08-03_ec5e30702a08c131c5cac7d862b7a295_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_ec5e30702a08c131c5cac7d862b7a295_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_ec5e30702a08c131c5cac7d862b7a295_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4232