b74456fbd0d8ce9622d8510a45f299da1d88d6de2555ac7800fdbc292082ffea

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 08:21

Target
2026-08-06_832b4f9d2b81b631d41ec25722ad38b5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 354KB
Sample260806-j9f2jsgf67
SHA256 b74456fbd0d8ce9622d8510a45f299da1d88d6de2555ac7800fdbc292082ffea
MD5 832b4f9d2b81b631d41ec25722ad38b5
SHA1 a8e0a72f030acadcf865e635f0d92c1b6d6080fe
SHA512 28f6f365e49031de7b7a13e7b0753c2e90f10cf42ca9c12542a5872a7dbba0323ae371437071d4e6be803fd502e6414e59b786bccd3576c1c4cc25a67d7b4178
SSDEEP 6144:J1kDQfQQ5ufekCQj+Pjt9R3G8MONsF72SQiI1M/vV:J6wQQULCQc9lNM7USQimC
TLSH
T145747D19FB9904F9E5BBD138C9624906DB727C1A03619BCF23E447562F276E09D3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4896	2026-08-06_832b4f9d2b81b631d41ec25722ad38b5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4896	2026-08-06_832b4f9d2b81b631d41ec25722ad38b5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-06_832b4f9d2b81b631d41ec25722ad38b5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-06_832b4f9d2b81b631d41ec25722ad38b5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4896