42edba6a1a63572b9a5ca9be3ea33899700a5fe463bfc1f7af63cbb333293600

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 13:57

Target
2026-08-04_d9adfa37ee745e6218ea8a4921f8dcbc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260804-q9j7jayvgx
SHA256 42edba6a1a63572b9a5ca9be3ea33899700a5fe463bfc1f7af63cbb333293600
MD5 d9adfa37ee745e6218ea8a4921f8dcbc
SHA1 088c27976fb1a88b35cc7183b8754d4d38746ee8
SHA512 71eec79ec98fc84d8da9f16e88bfb6e85fcb8602828242bb47789ed6b3dac1c80726dea4b5ee5d2521b1f851e17a444a1a3e6af95a3163feb302bf53d7580abe
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwj:n6dHLN0DHu/RgvploQ
TLSH
T128159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5856	2026-08-04_d9adfa37ee745e6218ea8a4921f8dcbc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
5856	2026-08-04_d9adfa37ee745e6218ea8a4921f8dcbc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_d9adfa37ee745e6218ea8a4921f8dcbc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_d9adfa37ee745e6218ea8a4921f8dcbc_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5856