e2247a0c70777f1685360ef571975a0dd8f2b3ce172348d992b36786ac7b99ec

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 15:21

Target
2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 750KB
Sample260807-srgpssyanf
SHA256 e2247a0c70777f1685360ef571975a0dd8f2b3ce172348d992b36786ac7b99ec
MD5 cb73a951fefc52e7a19315b8140f376b
SHA1 c97227e7f0b33340686b7cecf1749a6bffa8ff17
SHA512 87d13660c219417cf93eb5b30f343fd24a9307e38f3518123822737d4b4b69f069eb7b8d681a7817254d2f29a4f7e0b587b905255f3ef56b5b1481062d321328
SSDEEP 12288:RngM8K8P4ElXddah8kyDIZ9WcQ2cMcIz1Od7Aw3i3pyGw4uVGKljawk3:RngHKYfXTkXy0Z9JQ/xca7fi3onGKZav
TLSH
T14CF4C009E7E404F9E0A7E178C9564A02E77A7C5E0771D78F13A856562F233A09E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4232	2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4232	2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_cb73a951fefc52e7a19315b8140f376b_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4232