0361a21606d27ff0ada9a31090e3ae139e5fbd9a6cc04306ac12ab36e52949ba

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 08:00

Target
2026-08-08_e083edf4ee258d316a531eee65400b38_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Size 2.6MB
Sample260808-jv7kyscd84
SHA256 0361a21606d27ff0ada9a31090e3ae139e5fbd9a6cc04306ac12ab36e52949ba
MD5 e083edf4ee258d316a531eee65400b38
SHA1 d97c26f7a6cd349e004049da08fe1b0be214bd10
SHA512 07c5df1085d5f180d3fa18847b547c30149148408148b8ff7ac03b202f3116b04e4929141623f6343548ee7007616dbcf80fc4115eb7f4367c7c124498c7c858
SSDEEP 49152:yg80LumMGfvGys6clFd7O0EeynX1cgoN8PomGclOKypr4mJAHWDbbVKvJl:d80wlj6cln7O0EeyX22Pd5lOlr4mi0fw
TLSH
T1C8C5221AEBD548F8E1BBE53899564D12E37A3C0A03719A4F13E4566B2F33290DE3E351
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5032	2026-08-08_e083edf4ee258d316a531eee65400b38_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
5032	2026-08-08_e083edf4ee258d316a531eee65400b38_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-08_e083edf4ee258d316a531eee65400b38_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_e083edf4ee258d316a531eee65400b38_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5032