23184f71baf32767cc3e8acdddb7c826a5275f8c952845188fd85fd303e6be94

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 19:55

Target
2026-11-09_4ff6b0f2bbfba959096febd73b3f7c38_cobalt-strike_glassworm_icedid_njrat_stealc.exe
Size 27.7MB
Sample261110-ynhetaaf58
SHA256 23184f71baf32767cc3e8acdddb7c826a5275f8c952845188fd85fd303e6be94
MD5 4ff6b0f2bbfba959096febd73b3f7c38
SHA1 4af9b74e214d1119019c9bc7eb632c79783ed89e
SHA512 a60e50a2a11ab2bbdfb07ec4170e9e0be86446109659c4267cdecc0ff80f4fe58d5a3c076c76219027ca68d338f90569b32b7c3b5e5029018b5efe37f21383d4
SSDEEP 393216:IFNtVauKKapXA0UXqkP+eiwNxofGhLSeA0bv:esTUBbNQGheUD
TLSH
T1DC575C4921AE14E5F8FA80348F1B54C7EFB0FC10A73097E75114BAA92F766F62EB5211
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5228	2026-11-09_4ff6b0f2bbfba959096febd73b3f7c38_cobalt-strike_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-09_4ff6b0f2bbfba959096febd73b3f7c38_cobalt-strike_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-09_4ff6b0f2bbfba959096febd73b3f7c38_cobalt-strike_glassworm_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5228