5fa9eb032e3b8a91091822521ce2baa417c0629570470bff5cb351fd98f54e86

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 12:30

Target
2026-08-20_714fe91e211e31e405d62b281ea02e8d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 883KB
Sample260820-ppqcdaxbjg
SHA256 5fa9eb032e3b8a91091822521ce2baa417c0629570470bff5cb351fd98f54e86
MD5 714fe91e211e31e405d62b281ea02e8d
SHA1 d2f5387d24f21e156a1bcb03fa9c228c6c565371
SHA512 afd2de12d426f5949183ce1603d27aa6e2715046557d20fc61cb3ac4c4c85be4e31ffe94c46be6dbfe6e07c149e8e9d2515bf3831eec91de4002332a6798912d
SSDEEP 24576:j6ayW589NpO4XFVlqPEAvTO1L75R+diwn+Ob:malebk4XFVlqPEAvTWGMwn
TLSH
T179159E49F2E901F8E0779578D9A5622BE53278561B308ADF03D0066D3F737E05AB7B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3768	2026-08-20_714fe91e211e31e405d62b281ea02e8d_cobalt-strike_icedid_njrat_satacom_stealc.exe
3768	2026-08-20_714fe91e211e31e405d62b281ea02e8d_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_714fe91e211e31e405d62b281ea02e8d_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_714fe91e211e31e405d62b281ea02e8d_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3768