Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 14:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe
- Size 49.3MB
- Sample260804-sczxtszyfx
- SHA256 ab0413bdf3b2074d19e19a437372a5321389c93b73198aec7a77d37e9ee6ac26
- MD5 90805e9a9ddbc830581bad84adb887d7
- SHA1 ec4bcc169dd9290a99c5e62f6019591362590ff4
- SHA512 179e9f8d18cb61f72d0863098652eaf2601e28c7877fcb24ae1fc5ae09399bc75b693e3c3d2963cf6dad2174f5d2196bc6d59b74dcc3e650da137399296df397
- SSDEEP 786432:oI4OrUA2QsfR+5T889CwQTrN+8/mT8B23Td9xFObc7:oI1rUZ85Tt9CwQ/N+8uTy23Td9x0
- TLSH T1B0B7D0E398884BF7F3AF5B3055A51236704D6C37CF9BCA82F69A58213C21F65C94AE11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 7 IoCs
pid Process 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 6044 2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-04_90805e9a9ddbc830581bad84adb887d7_akira_icedid_njrat_stealc_vidar.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:6044