ec354b54a74b6177fac1132b176103583cb7801bacd9d03de892e1d07c54d381

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 16:01

Target
2026-08-04_42703ae6d97c722c5131bf7a98a15b53_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Size 12.3MB
Sample260804-tgazya11ev
SHA256 ec354b54a74b6177fac1132b176103583cb7801bacd9d03de892e1d07c54d381
MD5 42703ae6d97c722c5131bf7a98a15b53
SHA1 a454b19c8d826fefa0b08828ad1916f734616fa0
SHA512 46806ba042afd02358dd05333cd1cfdbf0ad4047601e656e70c7a8f82136d3567d3eb109b3ac14ca3e246ec43468a8dd7b4e7b22fcb2f16a18b56f62ee7c622a
SSDEEP 196608:93GdEzADSF0ZaxFI1nY/Nq0vclX5ummitFUEB0JZwYl3PgKr5wbmB7rfNYPgry0:T0DS9aNGkDammbEBKw2IrSBa2y0
TLSH
T10BD63319F29609EDD1BBE5B899420E02E3793C4E1712979F1BA4179F3F6B210AC3E351
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5452	2026-08-04_42703ae6d97c722c5131bf7a98a15b53_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
5452	2026-08-04_42703ae6d97c722c5131bf7a98a15b53_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_42703ae6d97c722c5131bf7a98a15b53_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_42703ae6d97c722c5131bf7a98a15b53_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5452