b895b30b21243d9cc7f7c96e1c9226e15670852ce4962bafbc470d3c49ca48a9

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 00:52

Target
2026-07-28_802a4ba559d7681a2fcf0704ca5b2f0e_hijackloader_icedid_njrat_vidar.exe
Size 4.5MB
Sample260729-a77l2sdb95
SHA256 b895b30b21243d9cc7f7c96e1c9226e15670852ce4962bafbc470d3c49ca48a9
MD5 802a4ba559d7681a2fcf0704ca5b2f0e
SHA1 64dee3aa45f57f645512f95170167a5d708d16c6
SHA512 0123c319d7e0afdfdd0af3a6e4d3947d80e62ed0a5f1adc9febde9aa17547919af49fad777a60b69fc889f989901d416e0036d5762f5ba30acadf8dcbf28264c
SSDEEP 98304:r/wb7+D6pOI3/mFLOAkGkzdnEVomFHKnPr:khM8mFLOyomFHKnPr
TLSH
T1A3267C986EDC14D4DC9D907589624A2BD2F3BC870DB5CF1B0262BF9B6F333510E1A266
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3956	2026-07-28_802a4ba559d7681a2fcf0704ca5b2f0e_hijackloader_icedid_njrat_vidar.exe
3956	2026-07-28_802a4ba559d7681a2fcf0704ca5b2f0e_hijackloader_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-28_802a4ba559d7681a2fcf0704ca5b2f0e_hijackloader_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-28_802a4ba559d7681a2fcf0704ca5b2f0e_hijackloader_icedid_njrat_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3956