a68830d9d6e677ff507309fc873b67ad78e5aa00597a6016469b6a94e0a3538c

Analysis

max time kernel
150s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 20:21

Target
2026-07-18_c5ba2516c2874c45b57f6b3f0ab18177_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Size 2.1MB
Sample260718-y42tdsey9s
SHA256 a68830d9d6e677ff507309fc873b67ad78e5aa00597a6016469b6a94e0a3538c
MD5 c5ba2516c2874c45b57f6b3f0ab18177
SHA1 00552d44b8f2e2c4bb1b0ad8345c1f49ca8ea852
SHA512 c10daa70c3c9d4baad5b3c6360ae978fddb6df57607820d8c263ef7679929cb24c58f3aff4abdb8eeb4b7241931add3e4799dfacaa68063b49d636e2b084b626
SSDEEP 49152:71H4jR2TYrQbDTrwHeqtaHGDa7YqrU4u6tBvALfuG7:qUytoGWcqrUF6tBvAju
TLSH
T19FA5D00973E442DDFEABE1728A13C50BD7B17C450673865F06A46A766F33B712A2E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
800	2026-07-18_c5ba2516c2874c45b57f6b3f0ab18177_agent-tesla_amadey_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_c5ba2516c2874c45b57f6b3f0ab18177_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_c5ba2516c2874c45b57f6b3f0ab18177_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:800

config.ini

Path C:\Users\Admin\AppData\Local\Temp\config.ini
Size 13KB
SHA256 255f51c39ef46897189e96bb85d9a42fd06c69b93d6d1cfc7643459a3b8c27eb
MD5 47e81126e3ddfe34458d285ba92c3efc
SHA1 900212669aecdf61dbe3b49c698d90939573fb46
SHA512 fc14f183ec447d964dc76cc9bb460eaa37262da78c4ef5183867d53768c8a9c0e586e7e07e1e9c94967cda583c06f3d88cd9220d65dc9f341acf55d8448d4d9b
SSDEEP 384:JzVXC3BpHeFdQ78vcxz0pvcuLN/io/GrjgMFxM2Gmpym8qyJ:JzVy3BpHeUunhExM2Gmps
TLSH
T17A52B749CAD34362D891AE4D32B17DD76E3FB5CDC5CE0281DBAA853D39A300850EBD99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download