7f9fa59dfe1d9ee087cbbe8da1754e53ea4548d4553452515470ecbdb7876bc6

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 15:23

Target
2026-10-06_13c7ba0b705652defd97eae1a44f600f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe
Size 6.7MB
Sample261006-ssgfesfd52
SHA256 7f9fa59dfe1d9ee087cbbe8da1754e53ea4548d4553452515470ecbdb7876bc6
MD5 13c7ba0b705652defd97eae1a44f600f
SHA1 8128b44402a7d0cd3be6e4155cdc5bf59478b652
SHA512 0101e39aef27537a0496bd02ac80a3a50cb50f2103194a336d62402ba49cecf7ae7d4e7b5c94987a5d1c2ce22f71b55a052b7ee7d3498be3736fa7832cdacacd
SSDEEP 49152:J8RWVHHy9QP1Wv0HzKZhqGHJgYxE4gCFfJbKFoHthdFP+vmvSiyACbcXwc02WIZw:34w8f1ooHXVvA40lfoDN79ixp
TLSH
T1E3667D05A2E401E9D177C07CCE679502E7B2389A17F193EB219052EBAF237E53D3E661
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5924	2026-10-06_13c7ba0b705652defd97eae1a44f600f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe
5924	2026-10-06_13c7ba0b705652defd97eae1a44f600f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-06_13c7ba0b705652defd97eae1a44f600f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-06_13c7ba0b705652defd97eae1a44f600f_blankgrabber_cobalt-strike_glassworm_icedid_njrat_poet-rat_satacom_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5924