9f532abe559a233efd5745d2efeca4b45c2b6073832a584a734f8e411df9edaf

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 18:00

Target
2026-06-01_c0d596e5c88c58290c22ff385472798b_icedid_luca-stealer_njrat_stealc.exe
Size 13.7MB
Sample260601-wlk2tact5w
SHA256 9f532abe559a233efd5745d2efeca4b45c2b6073832a584a734f8e411df9edaf
MD5 c0d596e5c88c58290c22ff385472798b
SHA1 78feabc85eea21a2cbf8487c77e07516c18d48ea
SHA512 9b19602e1f28c0af74a181d16df0d88687a8a55b2d01723c89a34e322079e6ee171a82a9e5d242667f1e1221fddd6b8d5cb8ba42d997592757609f46f4b506bd
SSDEEP 196608:O2+2zdldHIPiyk4xrgw6DgFtoPyZct8d2Zcq5z4uS6P613HvqYBrRYLSy2p3s:tDdldHZykkQucSPq5z4uLP6NLYLv2Z
TLSH
T136E633B2FFDC316AC01F917E328226A34A76B57301B81B5B14E6B20F3797097952BB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4968	2026-06-01_c0d596e5c88c58290c22ff385472798b_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-01_c0d596e5c88c58290c22ff385472798b_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_c0d596e5c88c58290c22ff385472798b_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4968