aa18badd028d089c9975c658df3bcf55bcf9f5e2ea2f2683c3d5ab14c1e1120d

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 06:03

Target
2026-08-20_338f422fde9f477495f7e4d51cc396b8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Size 19.8MB
Sample260820-gsjd8sbf79
SHA256 aa18badd028d089c9975c658df3bcf55bcf9f5e2ea2f2683c3d5ab14c1e1120d
MD5 338f422fde9f477495f7e4d51cc396b8
SHA1 0039ca3bad42bd0eb80612390498e33791d44111
SHA512 cf0dac2612f0061c80050f80f0238dc0d00e82ee18ff440eab0da809718e583af7f7eeb00735d5ddc045d543757a19eba58508f16f65d02046fb30e26eec5d01
SSDEEP 196608:eCHYSx02rF+4jXZP/OyR/Du28J/8k78pL6tmc8pL6tmqFLOyomFHKnP:eCt225+uJnzFDu28D78pL88pLKF
TLSH
T132279D06B24604F4D1AB92784493D632EA307C020316429F79DCAD673F73BB95BF679A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4184	2026-08-20_338f422fde9f477495f7e4d51cc396b8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_338f422fde9f477495f7e4d51cc396b8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_338f422fde9f477495f7e4d51cc396b8_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4184