Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 12:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
- Size 262KB
- Sample260820-pwpz7axcma
- SHA256 3fd59a64ac0ef83934f9fddefa0311a35265afcf944d53f6caf21278920301ac
- MD5 5dab64d9f63eae230a1d4f45aac51308
- SHA1 78a7648817c1e8bdaadcebac8fe364d98e54858e
- SHA512 0d9d4a6bfd0b7d34b8a1d4a32de12fc9f62be9ee24fdcdae9bd8c736c34857ff4d74a32d1205cae1f4ecb918e0e09767cdb085e7a3fe830da3f210971512d31e
- SSDEEP 3072:CCkfk/4R+C/d/B3JFNJY1Jz+lAeo0j9Whb7BiIm5zsLfF1o/WVYXMVkDjvnInx5K:5kfk/4R+31JI73jghb781XYch
- TLSH T169447D15B7A50CFAED77C53DCD428905EA727C464760EACB03A04AA71F276E09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3632 2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe 3632 2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3632 2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_5dab64d9f63eae230a1d4f45aac51308_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:3632