4e3146d667812ace49638e15f9dbb37b9e13f7222ed4984e065723715c692338

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 20:15

Target
2026-09-10_0a6e8f08e1d33cb0fc3916f56f9c4f9d_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 679KB
Sample260910-y12dfsgl5y
SHA256 4e3146d667812ace49638e15f9dbb37b9e13f7222ed4984e065723715c692338
MD5 0a6e8f08e1d33cb0fc3916f56f9c4f9d
SHA1 784d3be1cf351751aa4140ca327eb63dcd22bb92
SHA512 a6f4de48a949774b75f5d21abe14f29c2848f70094a5c1b7bf6d4acfdc750565c6f02daaaf3c764b95326539e5a319a454d470e306c560a795181d15f5fa0c48
SSDEEP 12288:JCyjs8yGgS+3KF9aZnH7Kx8TBC5CUzRdPu0L3pz:0nh3EGKSTeCUnDp
TLSH
T141E46B16B6A451EAE563823CC992C536E772BC154B60DBDF13D00E5B3E23BD09D3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

NTFS ADS 2 IoCs

description	ioc	Process
File created	C:\ShieldBreak_{CD7B9076-2DC4-4533-98C3-32BC49D2CB21}\BERLIN:stream	2026-09-10_0a6e8f08e1d33cb0fc3916f56f9c4f9d_cobalt-strike_icedid_njrat_satacom_stealc.exe
File opened for modification	C:\ShieldBreak_{CD7B9076-2DC4-4533-98C3-32BC49D2CB21}\BERLIN:stream	2026-09-10_0a6e8f08e1d33cb0fc3916f56f9c4f9d_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-10_0a6e8f08e1d33cb0fc3916f56f9c4f9d_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-10_0a6e8f08e1d33cb0fc3916f56f9c4f9d_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- NTFS ADS
PID:4448