Overview

overview

10

Static

static

8

2026-07-22...uk.exe

windows10-2004-x64

10

2026-07-22...uk.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/07/2026, 00:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-22_24254fea4804740c56a045ab3dafd12a_icedid_mespinoza_njrat_ryuk.exe
  • Size 6.3MB
  • Sample260723-ak3dtabl8w
  • SHA256 cb8053c819c587f3e81b0201d27d686ccdd3ca042cb4c2ed50b84e7f2ee2232f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-22_24254fea4804740c56a045ab3dafd12a_icedid_mespinoza_njrat_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-22_24254fea4804740c56a045ab3dafd12a_icedid_mespinoza_njrat_ryuk.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4164
    • C:\Users\Admin\AppData\Local\Temp\{31DE5697-B733-4054-A972-647921D61A87}\_is4B38.exe
      "C:\Users\Admin\AppData\Local\Temp\{31DE5697-B733-4054-A972-647921D61A87}\_is4B38.exe" -IS_temp ORIGINALSETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp" ORIGINALSETUPEXENAME="2026-07-22_24254fea4804740c56a045ab3dafd12a_icedid_mespinoza_njrat_ryuk.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ISLogoSmall.png
        • Path C:\Users\Admin\AppData\Local\Temp\{1CD07179-3439-4C7D-BF6D-EF6DF83079E8}\ISLogoSmall.png
        • Size 1KB
        • SHA256 3039e1e23afc42bd3c07a8f4b65fb5d0377ca70f9f4ffb6fd7e7f33d82d837d1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Setup_UI.dll
        • Path C:\Users\Admin\AppData\Local\Temp\{1CD07179-3439-4C7D-BF6D-EF6DF83079E8}\Setup_UI.dll
        • Size 1.1MB
        • SHA256 ccdf3599f459091f5958379f7c4c0c284e09be1e0fce31f41d35482ae8a202a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Stablemate.dll
        • Path C:\Users\Admin\AppData\Local\Temp\{1CD07179-3439-4C7D-BF6D-EF6DF83079E8}\Stablemate.dll
        • Size 368KB
        • SHA256 934fed25c4904688fd37798a9c2b8477b4a78d1be2300ebc0d1222eaca6125ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuiteSetup.ini
        • Path C:\Users\Admin\AppData\Local\Temp\{31DE5697-B733-4054-A972-647921D61A87}\SuiteSetup.ini
        • Size 108B
        • SHA256 98e5bb436f6f02f151c0c15ba30a509836aa63909cb4c730c399e6ba33e7c415
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        _is4B38.exe
        • Path C:\Users\Admin\AppData\Local\Temp\{31DE5697-B733-4054-A972-647921D61A87}\_is4B38.exe
        • Size 6.3MB
        • SHA256 cb8053c819c587f3e81b0201d27d686ccdd3ca042cb4c2ed50b84e7f2ee2232f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download