8edac7cff480cdb5c071e69ff5bc4814e1d712303c4bbb6b8ffe06273ed00fa9

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/09/2026, 22:36

Target
2026-08-31_ff5d0d517e141a3959e5a34551d45703_cobalt-strike_icedid_luca-stealer_ngrbot_njrat_satacom_stealc_vidar.exe
Size 1.1MB
Sample260901-2jnmtasybv
SHA256 8edac7cff480cdb5c071e69ff5bc4814e1d712303c4bbb6b8ffe06273ed00fa9
MD5 ff5d0d517e141a3959e5a34551d45703
SHA1 3021307707a4cf08f9b841aa98853f3860e35d72
SHA512 46521e52032afc5ec1c6829e37c4028c3ce9e0048ba61223dfee607571fde25a18aa29641efbc010214be1075a6b5a376deeba8db0a0d26491276342005e3d80
SSDEEP 24576:Pc2jGzeepemjEJk+YMANGqXSSMlYu+OH6Uum3Ugud:U7pEJbVYul6VmVu
TLSH
T1CF45383975FCE2E6E426C134991257B2A9707C96D320E7FB1E92720A1E316E12E3D731
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4448	2026-08-31_ff5d0d517e141a3959e5a34551d45703_cobalt-strike_icedid_luca-stealer_ngrbot_njrat_satacom_stealc_vidar.exe
4448	2026-08-31_ff5d0d517e141a3959e5a34551d45703_cobalt-strike_icedid_luca-stealer_ngrbot_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-31_ff5d0d517e141a3959e5a34551d45703_cobalt-strike_icedid_luca-stealer_ngrbot_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-31_ff5d0d517e141a3959e5a34551d45703_cobalt-strike_icedid_luca-stealer_ngrbot_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4448