87b2b8afb749f8bc8e470bdf067cb030fe8d53ae8b07a25a1756a52553b6face

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 01:55

Target
2026-08-07_0df9f532d8f3d747c4445fcaf8e665a5_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 14.3MB
Sample260808-ccenwsfp61
SHA256 87b2b8afb749f8bc8e470bdf067cb030fe8d53ae8b07a25a1756a52553b6face
MD5 0df9f532d8f3d747c4445fcaf8e665a5
SHA1 a260fa4d5b62bc0b3aa38c75968ae17e9a753699
SHA512 c111cb818d66038514d3e11a1ad87b5e0a5b135a7771af8a41eb384c6b8c5dce3adbd2b52c5959565ae625ab1c37e2cde32f1dfe5f3a19898f7ab38c1c747cc7
SSDEEP 49152:1rpOwUddPt3KY5FNi4hGdPGXKOsTP0q4zVLAYynKQ3GQyC2e2KCWJFON/dKNsWs/:zUA8yxPvnTchzVLqyao3sGyao3s
TLSH
T1AFE60816B6FA11D1D1BAC0399503562BED70309A433C92FFA38189C56B707E8EE7DB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4572	2026-08-07_0df9f532d8f3d747c4445fcaf8e665a5_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_0df9f532d8f3d747c4445fcaf8e665a5_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_0df9f532d8f3d747c4445fcaf8e665a5_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4572