59afc11ff2e1c5960a14701a861d05b54b235d4289e8e8c30fa0ba611c977994

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 22:25

Target
2026-08-22_e4ee8da04bf10029b23cce0bd0f1019f_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Size 627KB
Sample260822-2b8m1szerf
SHA256 59afc11ff2e1c5960a14701a861d05b54b235d4289e8e8c30fa0ba611c977994
MD5 e4ee8da04bf10029b23cce0bd0f1019f
SHA1 f04a3dfc1815741d1ee25e9158c494dd4aaaabfd
SHA512 fbab30838d9e601a87662f9ab1ab3de011928d6e05e394c19bf51561c54d63e8e79c48c5f103ac9b9d068507c49d3019fe8dad2668fbeab7bfb2032d6da371c6
SSDEEP 12288:tZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJY+oF5Zr:DQKjlZQuaVWoqVpqsuJt6YcJY+05
TLSH
T164D47D4AA3A441F8D077C235CA834527E6B3BC056670862F13D74E5B6F272A15F3EB26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5864	2026-08-22_e4ee8da04bf10029b23cce0bd0f1019f_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-22_e4ee8da04bf10029b23cce0bd0f1019f_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-22_e4ee8da04bf10029b23cce0bd0f1019f_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5864