0a1c54be5d53c78c87202f498ebe92928f8b5794779f0cfd8220f9a3b3730325

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 04:49

Target
2026-08-09_e041761089701e09550dcff94a51419b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260809-ff57sstyc1
SHA256 0a1c54be5d53c78c87202f498ebe92928f8b5794779f0cfd8220f9a3b3730325
MD5 e041761089701e09550dcff94a51419b
SHA1 bf9b05c1eeb5b64049429f345542718ae2e3066e
SHA512 56a3a751f52d50628108388968c2cc4c686a8e93c19b5e7bdbc4a8bdcd4a4c5699d12992edb0f947a9ad9bdbf3b8bdb8845369d7edccfe03ef410490b7be278a
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhw8:n6dHLN0DHu/RgvploL
TLSH
T117159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3596	2026-08-09_e041761089701e09550dcff94a51419b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
3596	2026-08-09_e041761089701e09550dcff94a51419b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-09_e041761089701e09550dcff94a51419b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_e041761089701e09550dcff94a51419b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3596