841bb42aec4a3793a3c892b5750a5b7e72d7d0b950d31e6540eba35700b891a6

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 04:08

Target
2026-10-13_dcbefa26c2497b5d045d3e4e147a0f29_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 714KB
Sample261014-eqebdsft8z
SHA256 841bb42aec4a3793a3c892b5750a5b7e72d7d0b950d31e6540eba35700b891a6
MD5 dcbefa26c2497b5d045d3e4e147a0f29
SHA1 a66a7816b862f5e136284ac28eea29f5eb11c922
SHA512 89f4670fb1ced02b9a7cd7d663f0c2b96490ad688a4a4ba577bd19a424d066354885369f2122bfe7e344b86df174171d1f4178ac8a4897e8ce2b222bfa4af426
SSDEEP 12288:LLO1t6hSkqCnxeAqQATmphPBUrZbnyf5303vVbVU:fqCxeAqQATm9UrZbyxSvVbV
TLSH
T1F0F44A46FBE504F4D4B7813988A3160AF7B1B85A0330DBCF16948A5A9F2B7D0AD3DB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4848	2026-10-13_dcbefa26c2497b5d045d3e4e147a0f29_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4848	2026-10-13_dcbefa26c2497b5d045d3e4e147a0f29_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-13_dcbefa26c2497b5d045d3e4e147a0f29_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-13_dcbefa26c2497b5d045d3e4e147a0f29_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4848