Analysis
- max time kernel
150s - max time network
156s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
07/05/2026, 04:50
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-07_ae1182164df5770a5fefc7377c950e2b_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-07_ae1182164df5770a5fefc7377c950e2b_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-07_ae1182164df5770a5fefc7377c950e2b_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
- Size 2.1MB
- Sample260507-fgf93abs2l
- SHA256 33ffa37f883c2879b527e651459814f9ac58194b8a191e62d59c23f5c0c58a3e
- MD5 ae1182164df5770a5fefc7377c950e2b
- SHA1 04626d6fcc8985915e47321cbd44ece39248f6cb
- SHA512 4aea777a727ee9d354de3f1149ceb2a8defe5d9a7f2d2b2dad14ced2d0633404fb043149f309acd196432c6dd3385ff6b59bd244a864f0727748ae082d55e80f
- SSDEEP 49152:L1H4jR2TYrQbDTrVHeqtazda7YqrU4u6tBvALfuGG:aUNtfcqrUF6tBvAju
- TLSH T153A5D00973E442DDFEABE1768A13C50BD7B278450773865F06A06A766F337712A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4968 2026-05-07_ae1182164df5770a5fefc7377c950e2b_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-07_ae1182164df5770a5fefc7377c950e2b_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-07_ae1182164df5770a5fefc7377c950e2b_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4968
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\config.ini
- Size 12KB
- SHA256 052dec11e64237b5f1847e945fdf2fe10af6d09499caf44e283f2d73257e3f89
- MD5 a7f676c638d6952bba486e3f36729c72
- SHA1 5a52647cadf8a16594b2bff67f9fbaeb5fb06176
- SHA512 2fb5faf0f66f3a474613254714fd22b8baa3a4e9a4117541e6acdc89358c4d298c91a56464909ab92fd92ba10319801f5156e596b4ac1b026564040d3c24b80e
- SSDEEP 384:aGr+lpHeFdQ78vcQz0pvcCXGLHogM32Gmp4m8qy0:aGr+lpHeUZ6C2Gmp1
- TLSH T19C52A749CEE38353D891AF4D32B53DD36A3BB5CE89CE0251D799813C296340850AFED9
- MD5 SHA1 SHA512 SSDEEP TLSH