11bb31998aa693151064c071cde55159aae19f48f309022c4999325be77cb77b

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 10:21

Target
2026-08-09_21c895fae3bf61fc29f0d43b4c704f25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260809-mdqgwsaa46
SHA256 11bb31998aa693151064c071cde55159aae19f48f309022c4999325be77cb77b
MD5 21c895fae3bf61fc29f0d43b4c704f25
SHA1 1f03fd4aa7ec6d4f2549cf0595acff41e9515665
SHA512 6a3d9e4d2333c45424fa3812d026e20b31aba8d48afcc475c3eba9b9f80b58a7fcf5d8949ee8c0929a05c85bbb054783407e804c5bed74604fe0472665473153
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhw+:n6dHLN0DHu/Rgvploh
TLSH
T18D159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5052	2026-08-09_21c895fae3bf61fc29f0d43b4c704f25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
5052	2026-08-09_21c895fae3bf61fc29f0d43b4c704f25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-09_21c895fae3bf61fc29f0d43b4c704f25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_21c895fae3bf61fc29f0d43b4c704f25_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5052