dfa373ea638e533466ab6e9a658f7aba793b0e1b7e373f18c2271369d93f70a1

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 01:37

Target
2026-10-22_a7c0f1c17fbd2e98fd18d49143c48daa_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Size 2.7MB
Sample261024-b112cs1yhv
SHA256 dfa373ea638e533466ab6e9a658f7aba793b0e1b7e373f18c2271369d93f70a1
MD5 a7c0f1c17fbd2e98fd18d49143c48daa
SHA1 929c3f665026f00fc90d340ebfc78090ff25b2e4
SHA512 995248bfbcbdf325c2505b85a23715aeae624ad44c256423ee6544b0d067acd393677387baf648ad06a2dc311d1daa213ccb3fb6a581e09533606bceafaa05e7
SSDEEP 49152:k56rbeW4SkZP4sz9MbguygmUSbHDUns56rtTeapYq:hr7fkZcEUEUrtTp6
TLSH
T163D50855B6B88BA6E0BBD179C5A29666FA733C410F3087CB0241DB2D3E276D18D35723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4864	2026-10-22_a7c0f1c17fbd2e98fd18d49143c48daa_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
4864	2026-10-22_a7c0f1c17fbd2e98fd18d49143c48daa_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_a7c0f1c17fbd2e98fd18d49143c48daa_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_a7c0f1c17fbd2e98fd18d49143c48daa_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4864