6ec7608133b931ca3905c24ebfeafe0e02594e1543ab2da227b990aba789290b

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/09/2026, 17:48

Target
2026-09-22_b8ab74a7d72e1cee94a9728a69eb6a79_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260922-wdvlaazelh
SHA256 6ec7608133b931ca3905c24ebfeafe0e02594e1543ab2da227b990aba789290b
MD5 b8ab74a7d72e1cee94a9728a69eb6a79
SHA1 c8594f037d40fd554ae946362f74df46c632ce58
SHA512 0b5dd75d95ac875cae01b562cdf8e8f8e084e1016d993a8e39af4998527545534ecc65216f1d212ce8d35d72974191d09fd5b2c845d16e3da2188c983b2c4bc5
SSDEEP 24576:H8Hgwz0KL1Eike85eOenrbJ/ZAzh0lhSMXlZ1v:H8Hgwz0KL1Pke85ZehyCv
TLSH
T1A3159E1AFB9901F9D07AC17889A66546F7B2BC46436057CF129136AA3F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1672	2026-09-22_b8ab74a7d72e1cee94a9728a69eb6a79_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
1672	2026-09-22_b8ab74a7d72e1cee94a9728a69eb6a79_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-22_b8ab74a7d72e1cee94a9728a69eb6a79_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-22_b8ab74a7d72e1cee94a9728a69eb6a79_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1672