3dfc64fd2a87994e8b3c5816733bc4b410eb68ffc4babf8939ee2d9b7b87affa

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 13:20

Target
2026-08-04_ff30ed3dc3bc8dc902b1e1bc856cd496_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Size 748KB
Sample260804-qldd3sxxhs
SHA256 3dfc64fd2a87994e8b3c5816733bc4b410eb68ffc4babf8939ee2d9b7b87affa
MD5 ff30ed3dc3bc8dc902b1e1bc856cd496
SHA1 1b5540a6e424f5ea0333c53b723e07e5d75bc59c
SHA512 f7bd8ead63b20b5a6977e65c9542b98c9e7da52f26ae9987c658b225527a909823c8bdf58c26481661fe9397812bd8b9bd6ec10e02511c811aa79832c2e5c413
SSDEEP 12288:yw6PrI6OXrjIEOnTYUdbvf6B0J3uRYme2hkhtxPAJ6IcNFn9NV:ywerI6O/ITNf6BEeRE2hkh/Fn
TLSH
T105F4BF49B2F841F8D0679039CA16AB0BEBB27849072059DB23E44A692F777E45F3F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4120	2026-08-04_ff30ed3dc3bc8dc902b1e1bc856cd496_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_ff30ed3dc3bc8dc902b1e1bc856cd496_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_ff30ed3dc3bc8dc902b1e1bc856cd496_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4120