ed8048653730ad1ea5ab72062dd292525056cb8830fae2591094c802d684c9d7

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 14:00

Target
2026-10-26_7a1f94663d1ac81c055389377dff46f9_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 399KB
Sample261027-rayfjsss6j
SHA256 ed8048653730ad1ea5ab72062dd292525056cb8830fae2591094c802d684c9d7
MD5 7a1f94663d1ac81c055389377dff46f9
SHA1 7d2c9a089df1bd53cbae3127ffa3ca527269474d
SHA512 e500edf4b0f519b318450325cabc7e01e57ff51bc2d31fbb5ab361b99a242572e8498f590f36f08562bbe17c48885e323b08f591a514bfa3a76e11dc45c7bb31
SSDEEP 6144:zWYtyRW31hkn1crfLNEbZmuvzy1cu2HF93WH3BgkISpRWlDONndKQ:zWW1h9Lyouv/hF93O3mkIfVONn
TLSH
T1CE947D55F7A404F9E277D578C9724502DAB27C9A0770D6CF13A84A9A1F23BD08E3AF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3032	2026-10-26_7a1f94663d1ac81c055389377dff46f9_cobalt-strike_icedid_njrat_satacom_stealc.exe
3032	2026-10-26_7a1f94663d1ac81c055389377dff46f9_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_7a1f94663d1ac81c055389377dff46f9_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_7a1f94663d1ac81c055389377dff46f9_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3032