9eb6ed77127fa03f7715d2b51fe937fec54b071c0c0f64dc396fe4bdf5330945

Analysis

max time kernel
150s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 03:15

Target
2026-08-15_cd20cf0346648a357081bf3f8c4389a3_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 512KB
Sample260815-dset9sej2x
SHA256 9eb6ed77127fa03f7715d2b51fe937fec54b071c0c0f64dc396fe4bdf5330945
MD5 cd20cf0346648a357081bf3f8c4389a3
SHA1 6d6cf3df8a78492de8ed0903e8d634d752bc472b
SHA512 4d175746e30011b454fe632a9433f81eb4bdaadee9acfee5be7be5ae4b690a416ead3ba881bbcc4154c547868fc889dcfc997f2cf15dd3ae4ccf7d0b045df180
SSDEEP 12288:HbQIi8rXTWcJHsp63L2tf69i5YitqCehk6E:HbQfQjWKM072B61/Cehkf
TLSH
T1CCB48E09E7E804F8E0B7F278DD625902E776784E1771D78F13A456662F233A09E39B21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\Windows\System32\__tmp_rar_sfx_access_check_240725890	2026-08-15_cd20cf0346648a357081bf3f8c4389a3_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
File created	C:\Windows\System32\test1.bat	2026-08-15_cd20cf0346648a357081bf3f8c4389a3_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
File opened for modification	C:\Windows\System32\test1.bat	2026-08-15_cd20cf0346648a357081bf3f8c4389a3_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-15_cd20cf0346648a357081bf3f8c4389a3_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_cd20cf0346648a357081bf3f8c4389a3_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Drops file in System32 directory
PID:2288