a5d16af3c4763895e526df10d7b5ffdd7e2b1040fb81501d9df7f41375f0485c

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 15:03

Target
2026-11-01_8f4caa4c6c0d152bbb8f28a9844881e7_glassworm_icedid_njrat_poet-rat.exe
Size 15.8MB
Sample261102-sez1lsvsgt
SHA256 a5d16af3c4763895e526df10d7b5ffdd7e2b1040fb81501d9df7f41375f0485c
MD5 8f4caa4c6c0d152bbb8f28a9844881e7
SHA1 c2dee3e56abedfd11dc4291a66fb4f5d8e7d7e31
SHA512 dba7d713765f7c3bfb1891ca724d8396b4a9fa513d87582e868920457897e1822c99c81bb6080124278c81f5e32e11203037eb974089d57f614eb7f8766325f3
SSDEEP 49152:gT17j9WwrB69EMimcDg8ay9NhGlz77pjXCd/ZxM1wRTrIGgzGw8I2UqhEwMFduHX:gpc5UAGLgduHQHIbn7Q/oP1Y
TLSH
T16FF6C60AEB7A50C2D1BAC03D9652E62AFCB134DAC379A7DB87415E165F127E0AD3D304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4588	2026-11-01_8f4caa4c6c0d152bbb8f28a9844881e7_glassworm_icedid_njrat_poet-rat.exe
4588	2026-11-01_8f4caa4c6c0d152bbb8f28a9844881e7_glassworm_icedid_njrat_poet-rat.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-01_8f4caa4c6c0d152bbb8f28a9844881e7_glassworm_icedid_njrat_poet-rat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-01_8f4caa4c6c0d152bbb8f28a9844881e7_glassworm_icedid_njrat_poet-rat.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4588