d7da169e0637b4bd4fd156e31a181aba914989bde332f1aef6d926da5612a19a

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 00:54

Target
2026-08-04_5a94ed1ac64f1f3052dfdec3f9c6f5c3_icedid_mespinoza_njrat_ryuk.exe
Size 3.2MB
Sample260805-a88whabc53
SHA256 d7da169e0637b4bd4fd156e31a181aba914989bde332f1aef6d926da5612a19a
MD5 5a94ed1ac64f1f3052dfdec3f9c6f5c3
SHA1 06059f1eb8c262595fd1f836bc3353a5fb66fd95
SHA512 613d671beb8db7b0df5152a98a0da4f525fbc8dbacc619313dc2136b0eaec8c1e04dceaeeec61cdc0d693b07ac310b7a512d22c6850943c6f6a87b08a499375f
SSDEEP 49152:sgGZyVXDH3y1zOpuCULJXe6YjKVJOVH/MVNeL6KJ897rEIRz1IKP6eNAe:FVT2Xe6YGMJ8dESzjC3e
TLSH
T129F57C4AAAEC06D1E1B6C234C542854BDBB5FC111A77D75F0169478EAF332B28E5E332
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
372	2026-08-04_5a94ed1ac64f1f3052dfdec3f9c6f5c3_icedid_mespinoza_njrat_ryuk.exe
372	2026-08-04_5a94ed1ac64f1f3052dfdec3f9c6f5c3_icedid_mespinoza_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_5a94ed1ac64f1f3052dfdec3f9c6f5c3_icedid_mespinoza_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_5a94ed1ac64f1f3052dfdec3f9c6f5c3_icedid_mespinoza_njrat_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:372