c47e9383f56ca255d81bdd82ca4b008d54bcf9f3b11e24404f229e145a6d39fb

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 15:49

Target
2026-10-22_3e67d5c667476c9042c74f62265e6bb2_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 1.2MB
Sample261024-s9fkfsvxez
SHA256 c47e9383f56ca255d81bdd82ca4b008d54bcf9f3b11e24404f229e145a6d39fb
MD5 3e67d5c667476c9042c74f62265e6bb2
SHA1 f2f9c0c67956e27b0d6d565db76e893c8a991125
SHA512 9194db65765177359b497cb97b97c912eb35f58fb2c9dc45d28b8bae319abe954947614e638cb52608a1c03e0614636bd136024f404c80336b9ebd86395c430f
SSDEEP 24576:hqCxeAqQATm9UrZbyxSCLivzeeo9aI0IVmOR0:hTeFlmoCLueTL0IX
TLSH
T141458D4BEBA004F5D5B6803985931E0AFBBDB8550324D7CF1694466A8F2B3E0A93D71F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6132	2026-10-22_3e67d5c667476c9042c74f62265e6bb2_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
6132	2026-10-22_3e67d5c667476c9042c74f62265e6bb2_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_3e67d5c667476c9042c74f62265e6bb2_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_3e67d5c667476c9042c74f62265e6bb2_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6132