f0309ff97566a8d6a2db4ed29afd2316603b8f013927de1270cedae10549c6d5

Analysis

max time kernel
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 09:14

Target
2026-09-11_6cb3a6c7161d9afa1fe668243822492f_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 22.5MB
Sample260912-k7b59ashpe
SHA256 f0309ff97566a8d6a2db4ed29afd2316603b8f013927de1270cedae10549c6d5
MD5 6cb3a6c7161d9afa1fe668243822492f
SHA1 3316da71ecc2e04e2c51d8c081ad447a08a1c502
SHA512 62cd0b86491f742f2319f78c655401441acf75050636d6209592ae04b46b579abc9a8c96bec6d96bbefc842e5c99579e9a7192c84615ca10b655266e74491e42
SSDEEP 393216:O6sv+/iAmWH94HG+gvQe22zqLG7bzGQ3pgRxEcoTsa0V85s7l:O69/V5oGhjv1gnEcQsa
TLSH
T195371266B39901F8C1AB8178C5579B07E7B17808032497DB22D1A6662FB7BF16B3F311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4200	2026-09-11_6cb3a6c7161d9afa1fe668243822492f_glassworm_icedid_luca-stealer_njrat_stealc.exe
4200	2026-09-11_6cb3a6c7161d9afa1fe668243822492f_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-11_6cb3a6c7161d9afa1fe668243822492f_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-11_6cb3a6c7161d9afa1fe668243822492f_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4200