bc40f7fb645ffc605d63a0bf0d1ba8b5ace2df87928f420e46724b2edaa02b87

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 04:30

Target
2026-08-25_e75ebf495a80dcad52262623dd8bdda5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 321KB
Sample260826-e5alragm3x
SHA256 bc40f7fb645ffc605d63a0bf0d1ba8b5ace2df87928f420e46724b2edaa02b87
MD5 e75ebf495a80dcad52262623dd8bdda5
SHA1 07d240153beb935342fc6888366930b08f69d7b6
SHA512 d28618646750dd533007c75d73061a152817faab0efda692a2dedaee093c6834cc5fe46d2ad595f69a3981e3eb97c2722fbe0f56c3ef84cc03042d4d2c1e0178
SSDEEP 3072:8K6Ewyt5+wnyIv+mWOX4qte6JMpnovk0s2GSOIAI/5qvNuysJsSFiD8V4fN/5n9T:1MEWosx2GSH/lZqFfasoQ
TLSH
T17F644B4BAAA408F5CDBBD07D9842101AF97178E68360E7CB9395165B1F63BE4ED3DB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3192	2026-08-25_e75ebf495a80dcad52262623dd8bdda5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
3192	2026-08-25_e75ebf495a80dcad52262623dd8bdda5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-25_e75ebf495a80dcad52262623dd8bdda5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-25_e75ebf495a80dcad52262623dd8bdda5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3192