a5e4758fb4b034a173a2052fd30ee9792d463fd0dd99822772ac43acedaf71b5

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 10:38

Target
2026-08-23_60a8a12897ca1e29f53b1772ec3cc727_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260824-mpk2jswekd
SHA256 a5e4758fb4b034a173a2052fd30ee9792d463fd0dd99822772ac43acedaf71b5
MD5 60a8a12897ca1e29f53b1772ec3cc727
SHA1 0c3ca15e034fcf82bbe19b317eed6c59b832ae73
SHA512 77ae510a772bacab1a2aedeeff2b7f9a1c0bf91c35a91660258ec27fed6e8db3e419b383bc41d8efe5b9f49aa1e97bf7060b77fe54ac90bdcb047ea683d289a7
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwx:n6dHLN0DHu/Rgvplou
TLSH
T1E8159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4732	2026-08-23_60a8a12897ca1e29f53b1772ec3cc727_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
4732	2026-08-23_60a8a12897ca1e29f53b1772ec3cc727_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-23_60a8a12897ca1e29f53b1772ec3cc727_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-23_60a8a12897ca1e29f53b1772ec3cc727_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4732