Overview

overview

7

Static

static

3

2026-11-07...lc.exe

windows10-2004-x64

7

2026-11-07...lc.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/11/2026, 11:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-07_9d8a4dfb9d8ff8f3226ff2827aa3cffc_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
  • Size 775KB
  • Sample261107-nwf7lsbt5v
  • SHA256 cae5ade6cdefe64400d25c552391a5891aaa1149826640f09040247a6b0baee3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
persistence

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-07_9d8a4dfb9d8ff8f3226ff2827aa3cffc_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-07_9d8a4dfb9d8ff8f3226ff2827aa3cffc_cobalt-strike_icedid_njrat_ryuk_satacom_stealc.exe"
    1⤵
    • Adds Run key to start application
    PID:2652
  • C:\Users\Admin\AppData\Local\Microsoft\StorageSense-341C\DeviceHealth.exe
    "C:\Users\Admin\AppData\Local\Microsoft\StorageSense-341C\DeviceHealth.exe"
    1⤵
    • Executes dropped EXE
    PID:5084

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        DeviceHealth.exe
        • Path C:\Users\Admin\AppData\Local\Microsoft\StorageSense-341C\DeviceHealth.exe
        • Size 775KB
        • SHA256 57dae9a22b5f204efcd3fa07fa6e0d2dcb0fb726be11c1db18d753c99dfa0a69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download