6ccd019b6bb32879bfc198ee5c356edcb79e30e2834ce7a4a986d0701957c30d

Analysis

max time kernel
150s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/04/2026, 10:32

Target
2026-04-22_8b5c972526707d4f9a7be805b9a2241f_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Size 2.1MB
Sample260422-mk1anshs8x
SHA256 6ccd019b6bb32879bfc198ee5c356edcb79e30e2834ce7a4a986d0701957c30d
MD5 8b5c972526707d4f9a7be805b9a2241f
SHA1 0e531dce9ce452876409f0a0136c8b6513ded0c2
SHA512 6a0dc688c2465bb0c73448f3acd000e08c23a645596f1f7ccf03c54310d0d07fae3ccfb30a862d8dec846822e11aebf0f428a225dff3e77178bec3308aac1971
SSDEEP 49152:31H4jR2TYrQbDTrMHeqtagTa7YqrU4u6tBvALfuG+:GUutGcqrUF6tBvAju
TLSH
T1E3A5D00973E442DDFEABE1768A13C50BD7B278450773865F06A06A766F337712A2E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1120	2026-04-22_8b5c972526707d4f9a7be805b9a2241f_agent-tesla_amadey_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-22_8b5c972526707d4f9a7be805b9a2241f_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-22_8b5c972526707d4f9a7be805b9a2241f_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1120

config.ini

Path C:\Users\Admin\AppData\Local\Temp\config.ini
Size 13KB
SHA256 fcb24a1f37c6cd3617ec7ec34699362823b722a6097e141d87767303af27e8d9
MD5 2654b8bed6caf55171647ab3f040a965
SHA1 5e50dc2bbe71ff087786008f4da9f769c7ba8273
SHA512 ddcc89aab771e85ee98b6d4fee7620798dbc264a64a77f9b9a3b85e5c934931b26e385778497f29610bf9f4e656530b1ce0a8799bdc1e69671e52ec2284d4358
SSDEEP 384:EFx24epwecdQ78vcAO0pvcGGGqNLaO29tK+m8hJ/6:EFx24epwe72mT29tKj
TLSH
T19052A845C6D343A2C9E16E4E32B17ED32B3BB1CC99CF1391D799453E39D2008929BE99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1120-16-0x000001211D630000-0x000001211D71A000-memory.dmp

Download