b03d19810d4957bc9ee517d236307a7e3967dd47e1160e43f36be63cde211d91

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 00:40

Target
2026-08-04_85403bc1ef31d37f6a949b45d1430ca5_cobalt-strike_glassworm_icedid_mespinoza_njrat_poet-rat_ryuk_stealc_vidar.exe
Size 9.0MB
Sample260805-a1empabb23
SHA256 b03d19810d4957bc9ee517d236307a7e3967dd47e1160e43f36be63cde211d91
MD5 85403bc1ef31d37f6a949b45d1430ca5
SHA1 9e234559e7a5c1ae4657259eb214e3ea0d95e4ec
SHA512 83e9d07a3ef809141520b0c69eaecee762a96e26c65846cd1cb714a8dfc06cd72ea454b9d29485b497b434d3ee7dae624368d6e0170965deb79f604791bce27c
SSDEEP 98304:2FF1fOhuhQU+gc9Z3qa53uormeGu1trSc8Wf5uN9JeGvshpd/1P3:2FF1AuhQU+gc95qaHmeGWrKuGvsb/
TLSH
T145A66D6972AD01E8F1F6C07CCD878906E7B27C4A03B597DB1151B1EB1E376D86E39A20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4540	2026-08-04_85403bc1ef31d37f6a949b45d1430ca5_cobalt-strike_glassworm_icedid_mespinoza_njrat_poet-rat_ryuk_stealc_vidar.exe
4540	2026-08-04_85403bc1ef31d37f6a949b45d1430ca5_cobalt-strike_glassworm_icedid_mespinoza_njrat_poet-rat_ryuk_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_85403bc1ef31d37f6a949b45d1430ca5_cobalt-strike_glassworm_icedid_mespinoza_njrat_poet-rat_ryuk_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_85403bc1ef31d37f6a949b45d1430ca5_cobalt-strike_glassworm_icedid_mespinoza_njrat_poet-rat_ryuk_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4540