01784ab456b8aded46f7c0540529911d322a17e65130da3478c611d592e01763

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 13:37

Target
2026-09-24_2160f2b3d4248e0f729cc9ab907f399e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 856KB
Sample260925-qws8aaxcpg
SHA256 01784ab456b8aded46f7c0540529911d322a17e65130da3478c611d592e01763
MD5 2160f2b3d4248e0f729cc9ab907f399e
SHA1 6a33be2e29e0a666083f5fd67675903213eef305
SHA512 86f263cc33b8faaf2c6b1b4601e9851e4e1acae70e8348c1e956949bc5396022defb3a56f81656021e9d0560736fbc1be75c8cd5f5da3b59ce8ffb2984b6826c
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhww:n6dHLN0DHu/Rgvplo3
TLSH
T1A7159D1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1200	2026-09-24_2160f2b3d4248e0f729cc9ab907f399e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
1200	2026-09-24_2160f2b3d4248e0f729cc9ab907f399e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-24_2160f2b3d4248e0f729cc9ab907f399e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-24_2160f2b3d4248e0f729cc9ab907f399e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1200