76f97f480ac02d52611da072d09a1eb8f68ba2972b30213647e484bc9b5f9ec2

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 11:07

Target
2026-08-15_63d07d4e0393bfe71f53e050e0d3f568_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 574KB
Sample260815-m755faan8x
SHA256 76f97f480ac02d52611da072d09a1eb8f68ba2972b30213647e484bc9b5f9ec2
MD5 63d07d4e0393bfe71f53e050e0d3f568
SHA1 e0ed4499cc79426d277a21087139d2dba9155943
SHA512 d85ef8fb7274cf6f199a6c3b7b8c56f6e3c95774440a556d8919787608181aadf1328420b650e569e789a922ff5895b6d556384d7b7c137d155449f422c969ab
SSDEEP 6144:O3HXOBxf43WY0OKGhNNmPV7Fdd7kl2I6SbePbrjm/1mpVpUc7/Xcm1IN/LptmqvI:jw1DJUVVY4ra/1GbNDXoNvUpGz29WIiE
TLSH
T170C49E09E7E804F8F0B3B6789D664902E7777C490771D68F03AC565A1F636A09E39B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3052	2026-08-15_63d07d4e0393bfe71f53e050e0d3f568_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
3052	2026-08-15_63d07d4e0393bfe71f53e050e0d3f568_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-15_63d07d4e0393bfe71f53e050e0d3f568_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_63d07d4e0393bfe71f53e050e0d3f568_cobalt-strike_cryptbot_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3052