d475802b21f6a4d17416c5dfe05e0e1b2ab01c1cb75f51f7a9879a3c756de282

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 04:28

Target
2026-08-12_a4164b911b1773e34dc0c59dfcc6a6e4_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 14.9MB
Sample260812-e35dcayejh
SHA256 d475802b21f6a4d17416c5dfe05e0e1b2ab01c1cb75f51f7a9879a3c756de282
MD5 a4164b911b1773e34dc0c59dfcc6a6e4
SHA1 84294bfaf5c970c04a9fa0addb325a750843a38d
SHA512 bae0f3d2f9c695ad41bea8c0db96f11064472e90b34baab782ea54dd741846a38b9e74a00e93b4ff6dfdc052653a68f0b1abffd48be05197a3aca0a5448d519a
SSDEEP 393216:l1bsrnloIBp+UjATGsDHQl4opVnUk8Qu3AADefzrBcteL4sXRp3em:l1e1BP4NQyopVnDu3NefzdUsBQm
TLSH
T1E8F63369AA8572F9E4CA55799DC7268FF75C30E643B019CF2A5C31CA2E13BC44B39306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2452	2026-08-12_a4164b911b1773e34dc0c59dfcc6a6e4_cobalt-strike_icedid_njrat_satacom_stealc.exe
2452	2026-08-12_a4164b911b1773e34dc0c59dfcc6a6e4_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-12_a4164b911b1773e34dc0c59dfcc6a6e4_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-12_a4164b911b1773e34dc0c59dfcc6a6e4_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2452