Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/08/2026, 02:30

General

  • Target
    2026-08-02_ddd807ae19fb1592c24050cf1d576f20_icedid_njrat_ryuk.exe
  • Size 691KB
  • Sample260802-czgrrssdph
  • SHA256 0e5764dad90fad98dff40927c6c237d25df5524d20046823c30bc9e2dae20ae6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-02_ddd807ae19fb1592c24050cf1d576f20_icedid_njrat_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_ddd807ae19fb1592c24050cf1d576f20_icedid_njrat_ryuk.exe"
    1⤵
      PID:4308

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/4308-1-0x00000220A5760000-0x00000220A5765000-memory.dmp

          memory/4308-0-0x00007FF645120000-0x00007FF6451C4000-memory.dmp

          memory/4308-3-0x00000220A5760000-0x00000220A5765000-memory.dmp

          memory/4308-2-0x00000220A3F90000-0x00000220A3F97000-memory.dmp

          memory/4308-6-0x00000220A5760000-0x00000220A5765000-memory.dmp