Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/07/2026, 08:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_99fda02a937bfeec04fbfa79e5ad8982_icedid_njrat_ryuk_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_99fda02a937bfeec04fbfa79e5ad8982_icedid_njrat_ryuk_stealc.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
General
- Target 2026-07-01_99fda02a937bfeec04fbfa79e5ad8982_icedid_njrat_ryuk_stealc.exe
- Size 5.0MB
- Sample260701-krdn5scs21
- SHA256 032678b8823b9c96f5cfdaf976e4ea7f01df74f772882c1c1eb2d4ed2e313595
- MD5 99fda02a937bfeec04fbfa79e5ad8982
- SHA1 b63943f7205b8d0b118bfe46d63b11ee9d9a2e5c
- SHA512 5527d64e077f1a20c611c7835785163e3c0edcd07ac008dd5b5ce7c5f7daafd31386955300ac89aa70471216722760fa387eec9c5b496adb424b23bb64b56924
- SSDEEP 49152:mCB8Q/Zbglj4WOVttJTua616ppTvWqHh6cMdVSP9/6DfemF:mCBjZZugMdVSP9/67p
- TLSH T12D36B643F9A616B3C03F27744C9342265B75BC052B711B4E236839187EB73BA3D6A6C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4316 2026-07-01_99fda02a937bfeec04fbfa79e5ad8982_icedid_njrat_ryuk_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4316 2026-07-01_99fda02a937bfeec04fbfa79e5ad8982_icedid_njrat_ryuk_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-01_99fda02a937bfeec04fbfa79e5ad8982_icedid_njrat_ryuk_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-01_99fda02a937bfeec04fbfa79e5ad8982_icedid_njrat_ryuk_stealc.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4316