033017e5768ff6a5dd48786d371eb908fa1f7833f7e5ff66e9d91df4ddcc255e

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 08:03

Target
2026-10-22_78340aefdc446f2cf40b853e04aef7c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 1.2MB
Sample261024-jxtf4saw3n
SHA256 033017e5768ff6a5dd48786d371eb908fa1f7833f7e5ff66e9d91df4ddcc255e
MD5 78340aefdc446f2cf40b853e04aef7c0
SHA1 f5dd54386f9f21d26153761e093bf14941f15caa
SHA512 d6fab7129de01edb70fb716d4dcc3ed794ce3688ae1fdc578d96ce75e183b73d7cf4fd64319552faedf4b8e7a619e4f01373057ccda10f9fa30cb0a34588f60e
SSDEEP 12288:jLO1t6hSkqCnxeAqQATmphPBUrZbnyf5303NXUDAWLttNaKGFZ3LjsVmC:HqCxeAqQATm9UrZbyxStUn/+ZjsYC
TLSH
T141458C1BEAA110F8C476803885A31D1AFBBDB8590734DBCB169447569F2B7D0A83E71F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4764	2026-10-22_78340aefdc446f2cf40b853e04aef7c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
4764	2026-10-22_78340aefdc446f2cf40b853e04aef7c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_78340aefdc446f2cf40b853e04aef7c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_78340aefdc446f2cf40b853e04aef7c0_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4764