2ec3f02570dfb7398aa489256abf1f4ae8ad2628b4355ec417e9794b3d327e76

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 15:47

Target
2026-10-18_38e6cacf09be8210d37a9537904c2406_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 1.2MB
Sample261018-s8prqsbf52
SHA256 2ec3f02570dfb7398aa489256abf1f4ae8ad2628b4355ec417e9794b3d327e76
MD5 38e6cacf09be8210d37a9537904c2406
SHA1 2293c13ee2ef54454020858273dd980023e0e5c6
SHA512 54e0d3b18057f0b9853675f052b3c2279d2b9baffa1bd24bc3765f65c2235541b76496a8aa9d50a2c731b723a4a8ccd629858947d1646e279caac8df44a438a5
SSDEEP 24576:vqCxeAqQATm9UrZbyxSlvjT2JdAkkL4gLq0a:vTeFlmolvjGrWha
TLSH
T1B2558C0AE7A024F5C4B6803986A35D06FBFDB45507349BCF1694461AAF2B7E0A93D70F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4900	2026-10-18_38e6cacf09be8210d37a9537904c2406_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4900	2026-10-18_38e6cacf09be8210d37a9537904c2406_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-18_38e6cacf09be8210d37a9537904c2406_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-18_38e6cacf09be8210d37a9537904c2406_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4900