b5c9f829f2d34a919523e560761e7fa831044c9036a559ce5b65caaacfcda58e

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 14:07

Target
2026-08-14_28805e43fd68b644325a7e93ab34ad09_cobalt-strike_icedid_luca-stealer_njrat.exe
Size 253KB
Sample260814-rfgd8adj6v
SHA256 b5c9f829f2d34a919523e560761e7fa831044c9036a559ce5b65caaacfcda58e
MD5 28805e43fd68b644325a7e93ab34ad09
SHA1 6860e4f210cebd9f7ec0ca2f3de27c96a1e5712c
SHA512 39083142dcde69909f276e815b959a8e5df2e07995bd0824a62b871ad93255e4e932c0deb40f49ed9ec8d1179c43732e48779d5f4f01b355e69a3da099927dd9
SSDEEP 3072:bxW+9+PJu2F8uyu+WzYz5OElwmSmQxGzAhLOzt0RdrIcPC8dmBDdHPQ1qrcB6+cV:bAlPJrIEYzcCMhyis8DqdvQ1vB63J9Br
TLSH
T157445BD3315411E6E9A1873584150906AF7A7C316B50A6BB16B03F2B0FBFAC0DDBFA91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Privilege escalation tool: RedSun 1 IoCs

RedSun is a local privilege escalation exploit from the Nightmare-Eclipse public toolset.

resource	yara_rule
behavioral1/memory/4212-0-0x00007FF762BF0000-0x00007FF762C33000-memory.dmp	hacktool_redsun

C:\Users\Admin\AppData\Local\Temp\2026-08-14_28805e43fd68b644325a7e93ab34ad09_cobalt-strike_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-14_28805e43fd68b644325a7e93ab34ad09_cobalt-strike_icedid_luca-stealer_njrat.exe"
1⤵
PID:4212