11fb542464d1be00212d65a8e0994e6d382cbbfc626398e17cc792bbc43d6779

Analysis

max time kernel
150s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 18:41

Target
2026-08-08_f4e6de84e102a42dc206ae97e79941d6_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 4.6MB
Sample260808-xbt3easgjf
SHA256 11fb542464d1be00212d65a8e0994e6d382cbbfc626398e17cc792bbc43d6779
MD5 f4e6de84e102a42dc206ae97e79941d6
SHA1 8badab575eb54628f51d72c2f75b6d8419085e0d
SHA512 3495656ed50a6a163caf246f2bbef18b705d20ed382281d4db70995e5621eb3d1648779244363b795585a814ec1a21a278bdbebb00eb250dd7ef8486fa535c90
SSDEEP 49152:lRlHE99JsLHXoBwZA7PaIVpeq9zqEHFKKlE6HCWZzPkI5d1WzFYHrfBUgTi9H23e:NESR/+y6zPkI5dR9UgmAO
TLSH
T1E226179552AC03E7D4D2903B8D0EF90BD6B27C45F1389A9B0D60764B1F373679E2A21E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4860	2026-08-08_f4e6de84e102a42dc206ae97e79941d6_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
4860	2026-08-08_f4e6de84e102a42dc206ae97e79941d6_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
4860	2026-08-08_f4e6de84e102a42dc206ae97e79941d6_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-08_f4e6de84e102a42dc206ae97e79941d6_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_f4e6de84e102a42dc206ae97e79941d6_akira_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4860