dcc80f3153de64f9806d2972648e98213c9db45d74426bf6ca45a600d861ba3b

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 20:06

Target
2026-08-19_40cadaf9eb5330adb1778fb0ad2a0792_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260819-yvle2ssdpf
SHA256 dcc80f3153de64f9806d2972648e98213c9db45d74426bf6ca45a600d861ba3b
MD5 40cadaf9eb5330adb1778fb0ad2a0792
SHA1 4739ca93c6b929960481288a6c10605032596be5
SHA512 2a2c0a29fca452100bc5122ac93f1d2212156dd144d87e45614155df8e0f2a480d65d861436bcbf57da399faeb713ab60c54ea3d066a29c0ea4047e14a8e4330
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwr:n6dHLN0DHu/RgvploA
TLSH
T11B159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5856	2026-08-19_40cadaf9eb5330adb1778fb0ad2a0792_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
5856	2026-08-19_40cadaf9eb5330adb1778fb0ad2a0792_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_40cadaf9eb5330adb1778fb0ad2a0792_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_40cadaf9eb5330adb1778fb0ad2a0792_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5856