acef5e83fcd9706b68f2926554bd908adc3f17e151747adb44793f54dee7a9ad

Analysis

max time kernel
148s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 08:50

Target
2026-08-12_4659b118329a5a54db682de20689e097_cobalt-strike_icedid_njrat.exe
Size 2.3MB
Sample260812-krtqcssglf
SHA256 acef5e83fcd9706b68f2926554bd908adc3f17e151747adb44793f54dee7a9ad
MD5 4659b118329a5a54db682de20689e097
SHA1 d7bf8a31b2f09da6b5c1c1dab6fd4443b1b13a9b
SHA512 b4e6da7516a9c0836fdcc441887d1cbecf5128f21bd347e212a916bdbb41b211b141e1fc0ca0238679829602bdad1e7d2a55d2a8f26c4c40eb3a7031d0b75f35
SSDEEP 24576:PwEooWinCJK1/N8RS39qBVpKSVlTgEkhSQog6uqZzPHxgcp:YEV1SdXVBgEYB2d
TLSH
T147B56D27B7B941C2D1BEC13D8696D72BF8B23459C371A7CB42914A9A1B13BE45E3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3552	2026-08-12_4659b118329a5a54db682de20689e097_cobalt-strike_icedid_njrat.exe
3552	2026-08-12_4659b118329a5a54db682de20689e097_cobalt-strike_icedid_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-12_4659b118329a5a54db682de20689e097_cobalt-strike_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-12_4659b118329a5a54db682de20689e097_cobalt-strike_icedid_njrat.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3552