80299b7e8006f8d288e70981eae5ad18d3835834b81d008c8961afcfcedf6a01

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 02:54

Target
2026-08-20_7099d4a9657f98515868bd1098fd219c_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
Size 15.1MB
Sample260821-ddwt8svyex
SHA256 80299b7e8006f8d288e70981eae5ad18d3835834b81d008c8961afcfcedf6a01
MD5 7099d4a9657f98515868bd1098fd219c
SHA1 9928b21dba2a3b81380adf7dd48dbc1c9b33a60c
SHA512 ccd4503a6c3fd0dd94daaf780709dac6139047fd040d3f0f7bf012438e4e1342e71a4aace7e023d27b3fa04a63778a7fc5daf217f92c2073749f12413db1f897
SSDEEP 98304:HXJpCSDls+CgAXHFVJC5DgdNw66lwfn0zKn94V6brCELZyUo4SRvI:HXrgT1HX36lA06AMCEsJBg
TLSH
T1BDF67D02F6D79DE8D4CDC470864B8A23CA2178C7052AB66B27C5061A3FBB7E45F5970E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4156	2026-08-20_7099d4a9657f98515868bd1098fd219c_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_7099d4a9657f98515868bd1098fd219c_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_7099d4a9657f98515868bd1098fd219c_akira_cobalt-strike_glassworm_icedid_luca-stealer_njrat_.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4156