2363eae07d5abb0273cf4f437b7d40476a078aaec92b10a3841ab0c06c3786e9

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 01:35

Target
2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc.exe
Size 531KB
Sample260808-bzy6dazyaz
SHA256 2363eae07d5abb0273cf4f437b7d40476a078aaec92b10a3841ab0c06c3786e9
MD5 330e7729de95c2f19ede9536d128106d
SHA1 53c080d53ca2d3a5536f2108958731af6f9b0337
SHA512 21bde89fa8148a1741f2d99ae89ef687b8cfa0ac27d92a4b1c9afb48c5c54620fd6e9bc291d4825f59aea445de6351754f4fea941f6833fe78bac5c03df43f73
SSDEEP 12288:vwF3TpVH+6XOMhXtq5vewfbf3FFpBQyqvm:IF39B+6eM1tyvlDHXQyqvm
TLSH
T17DC46D56F3A943F9E1B7C134C5929603EB727886033499DF53A08D7A2F136E19E3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
996	2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:996