9871c61914d5d2b24064043f265143fc64f9213a615cb82960171b2efdeb67fa

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 23:36

Target
2026-11-02_c1d0bf4e6bf12aecba6b23915370d413_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
Size 4.3MB
Sample261102-3lsj8ady3y
SHA256 9871c61914d5d2b24064043f265143fc64f9213a615cb82960171b2efdeb67fa
MD5 c1d0bf4e6bf12aecba6b23915370d413
SHA1 a0c15ff57459b997ca154dc755475178eb1fc633
SHA512 8c2811d01b499b72c76e9217a2bd1965af23c52dda7c3cb8e743e14f8b9fff08067f03df18a7ae45147124990aba5d29e26f45f27e7d6add950188bef1dc4480
SSDEEP 49152:R/kVEUSZVN8/mM8lALfzC4NW2kma1MMHrODGhIbiV5E2trJ4eUEmHnXBuAapti3q:rVCv8yqbLrhIHeUr4AgiH
TLSH
T19826BE46A3B640E9C477C039C297B217E672301833649AEB17F04A692F77BE15EBB711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2644	2026-11-02_c1d0bf4e6bf12aecba6b23915370d413_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-02_c1d0bf4e6bf12aecba6b23915370d413_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-02_c1d0bf4e6bf12aecba6b23915370d413_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2644