General
- Target 2026-07-17_1e194ffe2e136446add11ebffcb2dd82_coinminer_icedid_mespinoza_njrat_remcos_ryuk
- Size 1.3MB
- Sample260717-kb7x2sa13s
- SHA256 4dcb2d5df1ab12c3e066a59e444bb5b1e26a780907affea8c6813b140ee314d9
- MD5 1e194ffe2e136446add11ebffcb2dd82
- SHA1 7402199283695f3df444def6092a264d5b3c28ef
- SHA512 376870aa9ff4e51a2f8b85189bd438d43cb2a373e453018b51724082b7ae68ffdd00e6cae1789a9512b0b10fd8f5d335ac942a051ca4a22261efa3e50b1db42c
- SSDEEP 12288:bNzTG1Ho5mm3RPwavQQ1WDVe6A0SxOgYlx/qPlh1ZoJAFLbO48fJjwNqJ95:RY6mm3RTQ26Vq0ggxUhQAFL38fR
- TLSH T1A1557C47F2A140FDC496C139D75FB622F5627C487628FEAB13C45B263D63A619F2AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_1e194ffe2e136446add11ebffcb2dd82_coinminer_icedid_mespinoza_njrat_remcos_ryuk.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_1e194ffe2e136446add11ebffcb2dd82_coinminer_icedid_mespinoza_njrat_remcos_ryuk.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_1e194ffe2e136446add11ebffcb2dd82_coinminer_icedid_mespinoza_njrat_remcos_ryuk
- Size 1.3MB
- SHA256 4dcb2d5df1ab12c3e066a59e444bb5b1e26a780907affea8c6813b140ee314d9
- MD5 1e194ffe2e136446add11ebffcb2dd82
- SHA1 7402199283695f3df444def6092a264d5b3c28ef
- SHA512 376870aa9ff4e51a2f8b85189bd438d43cb2a373e453018b51724082b7ae68ffdd00e6cae1789a9512b0b10fd8f5d335ac942a051ca4a22261efa3e50b1db42c
- SSDEEP 12288:bNzTG1Ho5mm3RPwavQQ1WDVe6A0SxOgYlx/qPlh1ZoJAFLbO48fJjwNqJ95:RY6mm3RTQ26Vq0ggxUhQAFL38fR
- TLSH T1A1557C47F2A140FDC496C139D75FB622F5627C487628FEAB13C45B263D63A619F2AB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtCreateThreadExHideFromDebugger