9ff56a5ca8430e58c298d1f683e1ec39a3d494e216001d818804d5714fe1f5db

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/09/2026, 21:35

Target
2026-09-26_66167bf298d85efe6ce6d54eac6f8e3a_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 679KB
Sample260926-1fbcmssape
SHA256 9ff56a5ca8430e58c298d1f683e1ec39a3d494e216001d818804d5714fe1f5db
MD5 66167bf298d85efe6ce6d54eac6f8e3a
SHA1 3c494f07a55895692fd87765f685dd2dc90d1ec0
SHA512 da1a411eb115f7227048dece33d352dd8da1cfb703d28228e655044b9b808d6aa63db34194526930b9fa56e9acf41bab63748b26dc164a4b538b1fa1499d470e
SSDEEP 12288:TJyzsMCmgS+3KF9aZnUFnBmx8TBC5CUzRdPu0L3pz:lXB3EZcSTeCUnDp
TLSH
T1E3E46B16B6A450EAE563863C8993C536E772BC154B60DBDF03D00E5B3E23BD49D3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\ShieldBreak_{7908CB90-70EF-47BE-8E7C-EE090043D5A6}\BERLIN:stream	2026-09-26_66167bf298d85efe6ce6d54eac6f8e3a_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-26_66167bf298d85efe6ce6d54eac6f8e3a_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-26_66167bf298d85efe6ce6d54eac6f8e3a_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- NTFS ADS
PID:1668