c80c6901a9ab5b17202127690f0bfec3b62e6204f5cd831a4d898ac83d739568

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 14:52

Target
2026-08-08_031812fe66b9ad50edc82c8d97042e17_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Size 1.3MB
Sample260808-r8vsbayfph
SHA256 c80c6901a9ab5b17202127690f0bfec3b62e6204f5cd831a4d898ac83d739568
MD5 031812fe66b9ad50edc82c8d97042e17
SHA1 596245f58fd0766f3ecdf9a5f877869d17de8030
SHA512 212df19bdee922d0802d138849b261f67848ca34bf56d25d99690473b2c1496afebda51d8be0047255f10b7ff6b23ade65969ff213d7d33a2d98c6e2e625d9c4
SSDEEP 24576:KIOrbFDCnrSgG44sydJmjT4dwIoeYb3oy9mGql7c1rsYExcJ3/UZtDnqh+LhFpWo:vOr0nhG44syv9irq2r3fM
TLSH
T10155AF83F292C0E9D61A8538CB556576A732BC58073076EB229C7A393E63FD05E3D316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
3412	2026-08-08_031812fe66b9ad50edc82c8d97042e17_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-08_031812fe66b9ad50edc82c8d97042e17_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_031812fe66b9ad50edc82c8d97042e17_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3412