3cadf8f2b8994a719f072b75cbf07fc392dcdb2c9d14c350bc28c70b323e25ae

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 02:54

Target
2026-10-22_9e1c2fabe09dae051bbf8383b33e16b4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 719KB
Sample261024-dd8tssft5w
SHA256 3cadf8f2b8994a719f072b75cbf07fc392dcdb2c9d14c350bc28c70b323e25ae
MD5 9e1c2fabe09dae051bbf8383b33e16b4
SHA1 af54dff36e4045ed6eb5dc77896efaceda998293
SHA512 0947bf8fe9bb411944c32bd009e8da594dd4f6de7a1a31463506f4d70c6f2e4f72d3447ca733cc512e57cef9a3b12bd40d1f63b95d790fc456ad66c6464fa18f
SSDEEP 12288:vLO1t6hSkqCnxeAqQATmphPBUrZbnyf5303/u:jqCxeAqQATm9UrZbyxS2
TLSH
T18AF43A46FBE504E4D4B7813898B3160AF7B1B8990330DBCF16948A5A9F2B7D0AD3DB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5028	2026-10-22_9e1c2fabe09dae051bbf8383b33e16b4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
5028	2026-10-22_9e1c2fabe09dae051bbf8383b33e16b4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_9e1c2fabe09dae051bbf8383b33e16b4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_9e1c2fabe09dae051bbf8383b33e16b4_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5028