3c9c4a2125ad1dfef1ba2e67c06a1c06cf1ecdbe7d10f725f9dd6cd87b284f19

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 23:12

Target
2026-07-22_d8924744300970c31ee582ff7a8df7b9_akira_icedid_rusty-stealer.exe
Size 1.3MB
Sample260722-26sv2sdc83
SHA256 3c9c4a2125ad1dfef1ba2e67c06a1c06cf1ecdbe7d10f725f9dd6cd87b284f19
MD5 d8924744300970c31ee582ff7a8df7b9
SHA1 13554908ce052835c8d1a8a9c66683756668139c
SHA512 3f1931a6dec719dae79a531e8f54ff68ccf639880b40deba2c060aacf8a29c874588ea466cf36df5cab23d1f1f5caa7a2252301f63428ca3441477cc2e67ef58
SSDEEP 24576:Xay1Tc4MCJRMiep+GaGByGr+eMhgjVFM3VIH06iyoL:KOTcsJRMieftVMhg7YIU6i
TLSH
T19D557D03E69581F9C0A9C4B4C3579A33EA72B88A0B34B5FF5BE057112E26F905B3DB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

persistence

Modifies RDP port number used by Windows 1 TTPs

Remote Desktop Protocol
T1021.001

Adds Run key to start application 2 TTPs 1 IoCs

Registry Run Keys / Startup Folder

Modify Registry

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\MonitorAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-07-22_d8924744300970c31ee582ff7a8df7b9_akira_icedid_rusty-stealer.exe\""	2026-07-22_d8924744300970c31ee582ff7a8df7b9_akira_icedid_rusty-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-22_d8924744300970c31ee582ff7a8df7b9_akira_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-22_d8924744300970c31ee582ff7a8df7b9_akira_icedid_rusty-stealer.exe"
1⤵
- Adds Run key to start application
PID:5668

C:\Users\Admin\AppData\Local\Temp\2026-07-22_d8924744300970c31ee582ff7a8df7b9_akira_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-22_d8924744300970c31ee582ff7a8df7b9_akira_icedid_rusty-stealer.exe"
1⤵
PID:4680