beef29753115ad5bce1fcaa7ceba0c1f28fb04132156a495077d97d5ef566513

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 18:11

Target
2026-10-26_4b55f01871fcec9f379bf9b75013478b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 686KB
Sample261027-ws2cdae15z
SHA256 beef29753115ad5bce1fcaa7ceba0c1f28fb04132156a495077d97d5ef566513
MD5 4b55f01871fcec9f379bf9b75013478b
SHA1 348f8b442b7257580baf22fc7638ec08ba7de7ca
SHA512 4ed24bb40df67ac1247d0f59ac64c8dace04ccc159b77d7c990561c603c11ab4b29a494c49fb9df7698c8b598b83035630455fd24078ce1abd7f51293127aa3b
SSDEEP 12288:iLO1t6hSkqCnxeAqQATmphPBUrZbnyf5303:mqCxeAqQATm9UrZbyxS
TLSH
T1C1E4490AFBE404F4E4B7813889A3550AFBB178560730DBCF1694865A9F2B7E0AD3DB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
452	2026-10-26_4b55f01871fcec9f379bf9b75013478b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
452	2026-10-26_4b55f01871fcec9f379bf9b75013478b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_4b55f01871fcec9f379bf9b75013478b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_4b55f01871fcec9f379bf9b75013478b_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:452