940011d9e9dac1e62d25fa4867164ae35020a52679137fa6bca55733e29fed6c

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 19:54

Target
2026-08-04_6807753ab09bf6f41ca27dd22e69f83e_glassworm_icedid_mespinoza_njrat_ryuk.exe
Size 21.9MB
Sample260804-ym2gasw1es
SHA256 940011d9e9dac1e62d25fa4867164ae35020a52679137fa6bca55733e29fed6c
MD5 6807753ab09bf6f41ca27dd22e69f83e
SHA1 6e885b72178950709579649cef114e2e3d14ef5d
SHA512 b42b0a050812fe018cb344f410f2c48d14468fcfcd332f70b8683ea0aefe5934405fc74038d894af1783c68feac127f8798519e25e7125e165dfc34208445ecf
SSDEEP 196608:SUtdI7NtmGbR2FJSkSSSSSSSNCRW5ySbLodw8+DtsDtiF2JsB2Jy7H+Awm:ymwUFJS3CR8LoyhDtsDt928JHB
TLSH
T16E379D47A2B104E4E9B7D1388AAF8507E773B85607319BCF215D47561F33BE06ABA720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1988	2026-08-04_6807753ab09bf6f41ca27dd22e69f83e_glassworm_icedid_mespinoza_njrat_ryuk.exe
1988	2026-08-04_6807753ab09bf6f41ca27dd22e69f83e_glassworm_icedid_mespinoza_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_6807753ab09bf6f41ca27dd22e69f83e_glassworm_icedid_mespinoza_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_6807753ab09bf6f41ca27dd22e69f83e_glassworm_icedid_mespinoza_njrat_ryuk.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1988