fa4f3602cacb83e444cfffa60f257555e4d161007e8355a45a53f344afa02ecb

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 17:17

Target
2026-10-29_10cda4cd94a2b1a8a83acd22ef552564_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 1.1MB
Sample261029-vtts9ads9v
SHA256 fa4f3602cacb83e444cfffa60f257555e4d161007e8355a45a53f344afa02ecb
MD5 10cda4cd94a2b1a8a83acd22ef552564
SHA1 3ce9acf65e20bf7539979dd63b452b3dfe4254f5
SHA512 14b1d93f912803f5b6841b0401fc5cb430b364e4c10e48a24d2572a1ad8a29304d2a313f2ac736b211d84abc1ae2b54d1e244a9b85562867895d93d42cedff5d
SSDEEP 24576:iXaiDl5A9xfWKLFIdm/UJtME0aIxM/gq:iX5Dl8pWmIZmqIMg
TLSH
T1D945CF29B6F541F8D476C079CA825507FB7278490335ABDF03A096A96F27AE48E3F311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1556	2026-10-29_10cda4cd94a2b1a8a83acd22ef552564_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-29_10cda4cd94a2b1a8a83acd22ef552564_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-29_10cda4cd94a2b1a8a83acd22ef552564_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1556