f9c6fdefc31a76801f4950ff582a8f90670e817d0b149e7b0d54f95025633b66

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 03:33

Target
2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 387KB
Sample260815-d4e96syake
SHA256 f9c6fdefc31a76801f4950ff582a8f90670e817d0b149e7b0d54f95025633b66
MD5 8f4084605dec3d71c502a2212035c8d1
SHA1 f5d2ea27065b45fb23d8a83cfd112d3cd439648c
SHA512 254283b53d5efe78d759019091430238f73cb883ac186918aebaa99224f7e4aae5277f0c684f36fc589bab5e80652a482c0da7d1a25e55129f09d9e451f3fb57
SSDEEP 6144:/t/kStlnixpMhZWJrTQM/EV5KVslgLpNHMYohXRB+XoAm:/tHEnEeTQM/kKVs0vLoNM
TLSH
T128844A1AFAA500F0D1B6C03DC992651AF9B138AA43709BDB67954B570F337E4AD3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1804	2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1804