5b8792f5a708691d0d53dd52fc7ef5798ab09f388d4a6e76163317e3f53d8950

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 12:09

Target
2026-10-30_fe1a7ee41db645e298e6995804f3f46f_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 1.1MB
Sample261030-pbj87sed74
SHA256 5b8792f5a708691d0d53dd52fc7ef5798ab09f388d4a6e76163317e3f53d8950
MD5 fe1a7ee41db645e298e6995804f3f46f
SHA1 f47e304ebe0898257bcaa7847284faace085d429
SHA512 7c465659d6d349259678dc36b6835e30e6f6e10692676f01d0c440ad565737fc27975a80da03683ad3b49bf4e3e6ccfca7a31fd0d0d9fb7b46249945b9cb9492
SSDEEP 24576:GKsCqGxQb/HH9LlczQIOepipnSShdmau:rhQjH9GMIypnSK
TLSH
T1E3359D09E2A801F9D07BD178C962990BEB72784907349ADF13E049A91F77AE09F7F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4300	2026-10-30_fe1a7ee41db645e298e6995804f3f46f_cobalt-strike_icedid_njrat_satacom_stealc.exe
4300	2026-10-30_fe1a7ee41db645e298e6995804f3f46f_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-30_fe1a7ee41db645e298e6995804f3f46f_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-30_fe1a7ee41db645e298e6995804f3f46f_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4300