17c44bfa1f558411389ccd0ea8615844e89f276e9c2242539805d562692579d8

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 17:07

Target
2026-09-13_21d069017a857a9602c087b40d4a70b2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 462KB
Sample260913-vm5beasydz
SHA256 17c44bfa1f558411389ccd0ea8615844e89f276e9c2242539805d562692579d8
MD5 21d069017a857a9602c087b40d4a70b2
SHA1 d751694d4bd067247918a983bd3b233f627b70ea
SHA512 f032fd7d56968b906874393891776470688f40044b5aabed954d8d2165cc92dc52e675fed9144661bd81fd034f6c2166be6c2633125374001f99a74f75f17e86
SSDEEP 6144:ztjLWLVVEgJhDgDbLBsWXVLHDKk/fASHJWXAZnoAPgf98e9rooy3MEvZc:pjLWLpJhDgDbds0VLHDKk/9pWQOA6mG
TLSH
T1A3A48D16A79401F9E167C138C9634907EA72BC4547A1EBCF43A4DA7A2F23BE05E3DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2752	2026-09-13_21d069017a857a9602c087b40d4a70b2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-13_21d069017a857a9602c087b40d4a70b2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-13_21d069017a857a9602c087b40d4a70b2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2752