c8be57b6b323825477d2ea32d440654b3a23d0469e8262335a155c42a944d0de

Analysis

max time kernel
150s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/05/2026, 15:00

Target
2026-05-16_615311d9b76bf7bf58b6bd6bc9874088_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Size 2.1MB
Sample260516-sdkvasat7q
SHA256 c8be57b6b323825477d2ea32d440654b3a23d0469e8262335a155c42a944d0de
MD5 615311d9b76bf7bf58b6bd6bc9874088
SHA1 bf998826fe5940cfa1ab3fbaf653846a856bcdd4
SHA512 87ee9d26c12e8437f74cb2ea096854024936274de5517e316cde3a7d723ac3aac676f2a1bca7b20f529a2e305c116310b86b9ae9914b2770be97d4891eec6f9c
SSDEEP 49152:K1H4jR2TYrQbDTrTHeqta9GUa7YqrU4u6tBvALfuGy:nUjtOGlcqrUF6tBvAju
TLSH
T11BA5D00973E442DDFEABE1728A13C50BD7B17C450673865F06A46A766F33B712A2E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5024	2026-05-16_615311d9b76bf7bf58b6bd6bc9874088_agent-tesla_amadey_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-16_615311d9b76bf7bf58b6bd6bc9874088_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-16_615311d9b76bf7bf58b6bd6bc9874088_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:5024

config.ini

Path C:\Users\Admin\AppData\Local\Temp\config.ini
Size 13KB
SHA256 1d444ceafa0066111e756aecef9b0549b0977c60a1776ed6451de65e06c15253
MD5 b673442c473feb09c06b5f9041c3be96
SHA1 c0c22e85998b2d17872eb7e5787b2a00266de1b9
SHA512 c6dee0422419c6e96ecc8f9458f4fd907467ba2470ed77b043f1ad19571b96189c4aa6d9c560fb4f4aa87f8b2e5705ec2e42ada3a7b060eac085d028e7b14968
SSDEEP 384:FeWQsIlpwecdQ78vcjO0pvc0LvN/iRsGvLadEC29tKEm8hJv:FeWRIlpwe75d5TEC29tKa
TLSH
T14E52B609C5D34266C960AD5E33B17DC32F3BB1CC99CE1391DB9A853E39D300852ABDA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download