b231369db48222124aa5006d119c30ac5c2b33321a9456d60ee7b96f04291b75

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 03:12

Target
2026-10-26_ecdd9fba254c6143225155a39d43857d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 1.2MB
Sample261027-dp8yyah19x
SHA256 b231369db48222124aa5006d119c30ac5c2b33321a9456d60ee7b96f04291b75
MD5 ecdd9fba254c6143225155a39d43857d
SHA1 2df7c210d90adf5d59fa827c9f136c2f3099fac9
SHA512 64b12955da53526cf4c09c3d0dcdd9aca6aaaa4b91ca50a692be16faec00d9b1e1f17a2db31f09239c85f6b5736843bba667123c28dac6b74a1fbe74827d3b22
SSDEEP 12288:nLO1t6hSkqCnxeAqQATmphPBUrZbnyf5303WnygsEFNMsaYgFG//iQWLsFcHcCqq:rqCxeAqQATm9UrZbyxSGzEYwqOdMN6Q
TLSH
T15E558D17EBA114F5C4B2813884635D16FBBDB4560724DBCF22508A26AF2B3E0A93D75F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2976	2026-10-26_ecdd9fba254c6143225155a39d43857d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
2976	2026-10-26_ecdd9fba254c6143225155a39d43857d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_ecdd9fba254c6143225155a39d43857d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_ecdd9fba254c6143225155a39d43857d_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2976