f5e099666478ebcf1b437783b59366cb1ec30527595cee88d4073d3015aad9c4

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 22:53

Target
2026-08-31_153dd3ff6008e19326ffbdf74d955a27_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
Size 1.9MB
Sample260831-2tzstszepd
SHA256 f5e099666478ebcf1b437783b59366cb1ec30527595cee88d4073d3015aad9c4
MD5 153dd3ff6008e19326ffbdf74d955a27
SHA1 0801f28835dc37aa282635c77216a4fb160f022f
SHA512 761f333811f1534fc5cb2f1496c5714f631cab75b240afe84b08c3a37c15be6750dd15f24da6fda5aa390fcb84d8da996c083fc4be8624e0b32acce3c46c3fd6
SSDEEP 49152:1PRI1+fu7NTbTHbujm9oheqgINUeSeURD:Yiy9GiINUeSeC
TLSH
T10495F122E6A401FDD177D179CA165912F7B3785B0331ABDB03D0895A2F2B6D88E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4832	2026-08-31_153dd3ff6008e19326ffbdf74d955a27_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-31_153dd3ff6008e19326ffbdf74d955a27_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-31_153dd3ff6008e19326ffbdf74d955a27_cobalt-strike_glassworm_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4832