38b4f60988e75aa0352e329a35ebb75429d8a3e6ad53929ed37c5c16f5f670c2

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 18:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-03_634de3da2e1d989dbc383afe6428a0d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 327KB
Sample261104-xe4e9ay13r
SHA256 38b4f60988e75aa0352e329a35ebb75429d8a3e6ad53929ed37c5c16f5f670c2
MD5 634de3da2e1d989dbc383afe6428a0d7
SHA1 8109128bcb096dcf424aeb11f88188b345f9d113
SHA512 ac9f568af512a8d056dd4f9de674a62309ac74a9dea23219f75621826329e9883c4f56f9eddd01c2d6a45a1c3f3ddce0bffa8e9e458b08c06f998eea4a966584
SSDEEP 3072:jijt4uNdDDq5hGeRZvlRoTIJioOKpf1sQgJJlL//j2qmK42HSA+QXnng9P48HKdE:jiDdvq58wJQULg9//jxXnHYKdLaQe
TLSH
T1AF642806E6A610E5F5F6803885929537FA7E785503609BFB13934E962F236FC993EF00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	2026-11-03_634de3da2e1d989dbc383afe6428a0d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	2026-11-03_634de3da2e1d989dbc383afe6428a0d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-03_634de3da2e1d989dbc383afe6428a0d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-03_634de3da2e1d989dbc383afe6428a0d7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Checks processor information in registry
PID:3016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads