bbfa20bce37dad1c36f5834a655da97b0c76669c1cad6580adf0a13e60ae11de

Analysis

max time kernel
150s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 15:47

Target
2026-08-09_e955c1e6a323e0ad96c6da923dcb76cb_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 861KB
Sample260809-s8k4jshm3x
SHA256 bbfa20bce37dad1c36f5834a655da97b0c76669c1cad6580adf0a13e60ae11de
MD5 e955c1e6a323e0ad96c6da923dcb76cb
SHA1 e3fca16a201c31d40ba7fe991ac292ac87e26fe6
SHA512 6618514e8c091cd97f0e449c7854e39cb79302ebe6d6aa6fa128d8cc7522b4f824897caf3bdf179adf4f1a9d63847f6325cb47229ffbd2884eaf65a0a5350f78
SSDEEP 12288:5676trLM7JOj2XNtrgn2BjsIBowD840H4RJLJPiCcnxo484/+:y6trL5j2XNjD840W9ivnxt
TLSH
T1A2159E59B2E500F8E0BB9574D9A5622BE67678161B3086DF03D0066C7F737E04AB7B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5452	2026-08-09_e955c1e6a323e0ad96c6da923dcb76cb_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
5452	2026-08-09_e955c1e6a323e0ad96c6da923dcb76cb_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-09_e955c1e6a323e0ad96c6da923dcb76cb_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_e955c1e6a323e0ad96c6da923dcb76cb_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5452