Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 06:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
- Size 480KB
- Sample260805-hpfdvafc45
- SHA256 b97311c7369977f4706ca5f72a85c581fbd743d5a6640b05c90ad31393d15437
- MD5 88c10610e7dadc22321906634d668b6b
- SHA1 dd0037a3159ce3c75ed353028274b75a75912166
- SHA512 fb0056bfbebad8e1021867589424613c0efb08ad5aa180244ca286f0c2cdf56b3292ad9c2947bc4e72e22bf214b18b5a4417cf12e90e1b0d4e76d2c5a4fc8529
- SSDEEP 6144:wlPbxH2DszM+w6tMPTfjTH4VTkZl9hsqpCmW:aVvpozfHo2l9hsy
- TLSH T135A428D5EAEC70B4D36681388972C52FEA627C4D476096CB23E42E473F326E059FA711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2636 2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-05_88c10610e7dadc22321906634d668b6b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2636