1133d0ec066809726063141a7e6cc63bdb787316507308a4583fc7780a29742e

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 11:07

Target
2026-08-09_6898749053f4f3da8c1a16cbc7a145ad_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 409KB
Sample260809-m8g41aab68
SHA256 1133d0ec066809726063141a7e6cc63bdb787316507308a4583fc7780a29742e
MD5 6898749053f4f3da8c1a16cbc7a145ad
SHA1 16f7603e728afe8c76906d6508dfc63467117ffb
SHA512 af3a25b8f184980b1131785342a5a747143a93522d99912ccdd78c2023e8d45ad5ee6551cebf5e476d5a33ec9692c8c6634dcc0b89ed6c28c4b3437fbf71fc1e
SSDEEP 6144:CWxGD0UVnvcfCjbeFGfQXd292dvRkju8+0dNI6UWCCD:CWxGDQoedd292dvRkK8BdGWf
TLSH
T113947D56F3A820F9E177853CC9924606EB72BC56476097DF13A00A972F277E09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3964	svchost_4Rp3MrsVj9.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 3964	3036	2026-08-09_6898749053f4f3da8c1a16cbc7a145ad_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-08-09_6898749053f4f3da8c1a16cbc7a145ad_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_6898749053f4f3da8c1a16cbc7a145ad_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Users\Admin\AppData\Roaming\svchost_4Rp3MrsVj9.exe
  "C:\Users\Admin\AppData\Roaming\svchost_4Rp3MrsVj9.exe"
  2⤵
  - Executes dropped EXE
  PID:3964

svchost_4Rp3MrsVj9.exe

Path C:\Users\Admin\AppData\Roaming\svchost_4Rp3MrsVj9.exe
Size 98KB
SHA256 e8b73c8abde65f3382d2fafac10301575a07c2b3619a12f0cbefb0f948257f5d
MD5 c47c9c1b13bf8bf412b57b40086f75fd
SHA1 acefc5a507753c36b73c728d4f5811f28d2e389a
SHA512 dc291f74746e750804308c14096bec260877266c9563ffb3bf7eb3ba3a112827d6ff9d7cb7d7d201d0250156c379fed0331cb64ca370085f37f34b83198dbb2f
SSDEEP 1536:Kw3eUJwkCE9RjwDwNySE8XGTHqSb6v8WCWpYlvWEhsW3dg9dlirYq/:K5U+UXdNySE5KI6UWCWpEWaQcYq
TLSH
T13CA3495B73E930F8E1B69639C4510A09EB76F8360B619BEF03A446561F236E08D39F71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download