Analysis
- max time kernel
150s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/05/2026, 19:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-08_6690754dbf0f07979f99c1e92a3020bb_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-08_6690754dbf0f07979f99c1e92a3020bb_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-08_6690754dbf0f07979f99c1e92a3020bb_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
- Size 2.0MB
- Sample260508-xvrfmacx5x
- SHA256 d5c45a834b4922837a88a1c7e752c3a420f7f926c1dd003ec93c6c84c4056864
- MD5 6690754dbf0f07979f99c1e92a3020bb
- SHA1 4b7b9919ccc4269280e4b56de392504b5b5b40e2
- SHA512 9905c860b9ce6bf8486bec0450b448f984ff20ced11589626c071a7607664f5c6bad10df4156717fc498c914ff29109e537f72091c987549e04bc700fcf75b8c
- SSDEEP 49152:m1H4jR2TYrQbDTrfHeqta60Ia7YqrU4u6tBvALfuG/:TUPtYZcqrUF6tBvAju
- TLSH T180A5D00973E442DDFEABE1768A13C50BD7B278450773861F06A46A766F337712A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3284 2026-05-08_6690754dbf0f07979f99c1e92a3020bb_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-08_6690754dbf0f07979f99c1e92a3020bb_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-08_6690754dbf0f07979f99c1e92a3020bb_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3284
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\config.ini
- Size 11KB
- SHA256 2e935c2b85980088fd42933d72823043d85e360781fcf78a7479f77ee3397764
- MD5 885568ed83e5b9e29b0ddb9f7a2eb423
- SHA1 7e3b69e08cfcd4a71c2faf7b6988ebd27d23693d
- SHA512 3190ba401bed9ea2f064152892feaee040bfa6312979ab414f6a795f1e702d59ff4f6694c8ab142c6d1be28cf4db2aff324c6949317f74a284c288d07f5f2e05
- SSDEEP 192:KGCcM5+U8pwecdBuKwvcfs/vcgBQhqNVBotrcaoq2ctK9mm8hJIel:KoM5+Npwecd0Kwvck/vcg+qNLaJ2ctKQ
- TLSH T14242C805C6D342B2CAA57E4E32717E932B3BF2CC85CE1351DB5A853E39D2004929BE99
- MD5 SHA1 SHA512 SSDEEP TLSH