1c2384b5d350b2b60ba9793ba2c420a64728c0bcfa2156a138eed7ff685f869c

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/09/2026, 06:20

Target
2026-09-07_18dc8c61689fdf4ec533b81603eb64b5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260909-g31q9sseqc
SHA256 1c2384b5d350b2b60ba9793ba2c420a64728c0bcfa2156a138eed7ff685f869c
MD5 18dc8c61689fdf4ec533b81603eb64b5
SHA1 668df8d716e93ae1a95be85f465beddd69160493
SHA512 a6266c0a42da06477ad1ece987478aae82851deef08ab73c1715cfdf4ec3eefea50b39afeea0498a92d5cdaccf5ed0269d0ce0e2574095274a645359cacf726e
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhw2:n6dHLN0DHu/Rgvplo9
TLSH
T148159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2696	2026-09-07_18dc8c61689fdf4ec533b81603eb64b5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
2696	2026-09-07_18dc8c61689fdf4ec533b81603eb64b5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-07_18dc8c61689fdf4ec533b81603eb64b5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-07_18dc8c61689fdf4ec533b81603eb64b5_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2696