4faadfc4d594ced6237f24b2cf532c527a54984611adf83af1cda7e4b1cc00cf

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 16:22

Target
2026-10-26_5dd8707ea86c6912a4a435845abb5e8e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 1.3MB
Sample261027-tvng7aev41
SHA256 4faadfc4d594ced6237f24b2cf532c527a54984611adf83af1cda7e4b1cc00cf
MD5 5dd8707ea86c6912a4a435845abb5e8e
SHA1 06f524184bbf494c539de392e8ed113e71044577
SHA512 1f9dcff5d156fd28e9be41fa76ebe2bd3e7644ad081dd518c2a8a3e48e9e6bdbae120c9032c02845e724ad1d5252b6f91c7f6c6e4c8eeee522449edafd702c9d
SSDEEP 24576:FqCxeAqQATm9UrZbyxScoZzUG3JL+Ni0QvR4Q/t:FTeFlmoRzT3dO9QvRNl
TLSH
T18B558C4AEBA504F5D4B7813884A35D06FBBDB45503389BCF268446269F277E0A83E71F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3452	2026-10-26_5dd8707ea86c6912a4a435845abb5e8e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
3452	2026-10-26_5dd8707ea86c6912a4a435845abb5e8e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_5dd8707ea86c6912a4a435845abb5e8e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_5dd8707ea86c6912a4a435845abb5e8e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3452