2b9fd019636524c56f2b37171beb592e8aeff25ddb797aecb02cfda0c5e3b4a2

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 02:28

Target
2026-08-14_5c53a61432d208b9c44990d39d3137ca_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 1.1MB
Sample260815-cx45aadd62
SHA256 2b9fd019636524c56f2b37171beb592e8aeff25ddb797aecb02cfda0c5e3b4a2
MD5 5c53a61432d208b9c44990d39d3137ca
SHA1 d53de5c4025d5761c0fedf73cf2562dfc972c8f8
SHA512 628b4d24edb485945312bd5b55cf1b1f6d48a3f4fb45f9c2f5b68b3e18592f339a8cf773130123a553a04f59ded7058641ecf9fff737a573998a68c9be337ee3
SSDEEP 24576:bGleR+G1ERLUSxVPH/DvdmXiaWGzvDWp7sX:bGlM+JUSxVP/zaWGb
TLSH
T1D8459D15E2A911F8D07BD078DDA7AA0BDA31784907206BDB13E01A953FA7BF05B7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3600	2026-08-14_5c53a61432d208b9c44990d39d3137ca_cobalt-strike_icedid_njrat_satacom_stealc.exe
3600	2026-08-14_5c53a61432d208b9c44990d39d3137ca_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-14_5c53a61432d208b9c44990d39d3137ca_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-14_5c53a61432d208b9c44990d39d3137ca_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3600