ed4d68de25699fca2ce9d3a66236dfd096913b7e77efce77f29c8777dc4e4090

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/05/2026, 22:56

Target
2026-05-09_d207ed5c8955a97ae152a8a630106423_cobalt-strike_icedid_njrat_ryuk.exe
Size 434KB
Sample260509-2wp2eaes4y
SHA256 ed4d68de25699fca2ce9d3a66236dfd096913b7e77efce77f29c8777dc4e4090
MD5 d207ed5c8955a97ae152a8a630106423
SHA1 bab01c6747e39be79829132123644d8f3075176b
SHA512 e06ecb67a5b27341e230c8468d21bd7de008a5edc3a2d9db5e3d6c3113c6d08ef6bbaf380e199630039c7c85f8fe32c05a82ce91e5b8ff9889bd42a67c01e946
SSDEEP 6144:1xzrWMEiqlERVcxQAvrte+QGDnnJ17mi0xXD+7wyJQUqOTclovQJXk0ZA16k8mhC:tIxQADteA71mXD412QvQJUSAN1AP3
TLSH
T1D0945C16EE5110FED49EC5788647E911AA357C8E3760F9CF07987A211EF2AE06B39F10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
688	Process not Found

C:\Users\Admin\AppData\Local\Temp\2026-05-09_d207ed5c8955a97ae152a8a630106423_cobalt-strike_icedid_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-09_d207ed5c8955a97ae152a8a630106423_cobalt-strike_icedid_njrat_ryuk.exe"
1⤵
PID:3704