12fea5969149eb61b67717b8c3fb06d4c61bad57ac50dac5c89bfe5970d3d40f

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 04:49

Target
2026-11-01_e83ba82aa1e4fe2b7c32f2b332fda9f6_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 2.8MB
Sample261102-ffsayazzcx
SHA256 12fea5969149eb61b67717b8c3fb06d4c61bad57ac50dac5c89bfe5970d3d40f
MD5 e83ba82aa1e4fe2b7c32f2b332fda9f6
SHA1 1dc7bc9bf37cb21c06642d143713e99e51750f79
SHA512 4ec5ae8ddb87da8d66c72f09afae1e942fe8a4aeea784bc4549ff3c6f91f496fce88d481663546c7de074f646b54129ec10ec96799dc0c95556a0693e6fcac97
SSDEEP 49152:c9Kb6xUdc3yv7n217FNAD0FHUneTuc3S5/t7Ku8tPmT7pyjaB3qIeQigBHJ4:khtNADJneqci5/g7teByQ3b3igl6
TLSH
T150D50248F2F900F9F2679538C9A6691BD77678510B204ADF13A5456A3F337E00BB7B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1616	2026-11-01_e83ba82aa1e4fe2b7c32f2b332fda9f6_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-01_e83ba82aa1e4fe2b7c32f2b332fda9f6_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-01_e83ba82aa1e4fe2b7c32f2b332fda9f6_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1616