628e9a039cffa916a791af0bfad36292662b3c24bf82d29d64babcbc36bd069c

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 04:02

Target
2026-08-25_e9f67ca83eff0311b41403c8d71c6b30_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 825KB
Sample260826-elsyzsgl5y
SHA256 628e9a039cffa916a791af0bfad36292662b3c24bf82d29d64babcbc36bd069c
MD5 e9f67ca83eff0311b41403c8d71c6b30
SHA1 1f38031cafe7e4a95a79204f2f2733d84b00bf56
SHA512 33ed14685a4fd52a378af9d9d633eb1888f8f8dc57b7740187486fc558a0e32cece62613fbbee7f68b3ef1699973d64988636274469735c50f0c75ae39513f1b
SSDEEP 12288:3LQxPFmN83FUHROHsN45v9XOIw9cd6oniose:3LQmoFUsHsYV+IwJonih
TLSH
T1A7059D49F2E800F9E0B79535D5A5661BD63278160B209BCF13D409A93F737E05BBBB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4528	2026-08-25_e9f67ca83eff0311b41403c8d71c6b30_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
4528	2026-08-25_e9f67ca83eff0311b41403c8d71c6b30_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-25_e9f67ca83eff0311b41403c8d71c6b30_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-25_e9f67ca83eff0311b41403c8d71c6b30_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4528