49dc3b94397de046796987fd75b46a2f92cf72278c2b2d4afeaedad0f0572ce0

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 00:00

Target
2026-08-10_3702f8e6448a7c4a9a71567d9433c994_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260811-aaevrsbc99
SHA256 49dc3b94397de046796987fd75b46a2f92cf72278c2b2d4afeaedad0f0572ce0
MD5 3702f8e6448a7c4a9a71567d9433c994
SHA1 eca6aa881cb0b891bbbb4673e9230643094c2bc1
SHA512 1ff43f72d80c2b5f5d106639a8ffda1a3c95fbc99e309c11eafde9d5878d0d6ca0c055eee7e78c86e6d48096e386b5e452be4a93b77f3884b58b8c5e25d74949
SSDEEP 24576:QkG8bBWEPTgR0u/2eKeXrgJPZP6h0lhSMXlANV:QkG8bBWEPT40u/2Ve4hXG
TLSH
T13C159E1AFB9901F9D07AC17889A66546F7B2BC46436057CF129136AA3F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1684	2026-08-10_3702f8e6448a7c4a9a71567d9433c994_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
1684	2026-08-10_3702f8e6448a7c4a9a71567d9433c994_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_3702f8e6448a7c4a9a71567d9433c994_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_3702f8e6448a7c4a9a71567d9433c994_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1684