e2247a0c70777f1685360ef571975a0dd8f2b3ce172348d992b36786ac7b99ec

Analysis

max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 15:21

Target
2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 750KB
Sample260807-srgpssyanf
SHA256 e2247a0c70777f1685360ef571975a0dd8f2b3ce172348d992b36786ac7b99ec
MD5 cb73a951fefc52e7a19315b8140f376b
SHA1 c97227e7f0b33340686b7cecf1749a6bffa8ff17
SHA512 87d13660c219417cf93eb5b30f343fd24a9307e38f3518123822737d4b4b69f069eb7b8d681a7817254d2f29a4f7e0b587b905255f3ef56b5b1481062d321328
SSDEEP 12288:RngM8K8P4ElXddah8kyDIZ9WcQ2cMcIz1Od7Aw3i3pyGw4uVGKljawk3:RngHKYfXTkXy0Z9JQ/xca7fi3onGKZav
TLSH
T14CF4C009E7E404F9E0A7E178C9564A02E77A7C5E0771D78F13A856562F233A09E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4140	2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4140	2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4140