fe3bcf921a1c9ccf8afdbcbcbc6e51d3232f353df458e2800b2f20dda272f23f

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 10:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-08_d3d7bd9540f55d35a89acbddcfa32b9a_coinminer_icedid_njrat.exe
Size 2.7MB
Sample260808-mr3pdavfka
SHA256 fe3bcf921a1c9ccf8afdbcbcbc6e51d3232f353df458e2800b2f20dda272f23f
MD5 d3d7bd9540f55d35a89acbddcfa32b9a
SHA1 824465b4e4e70b78126497a68bbe767e93cfafd0
SHA512 f2b0aa4537fa79d32a49ddfa96e019c24a5c25eb78b486eebdf294e1b7850a88ed715d4e233fab964de4cf4cc8162979841c7e98885dfd5a0c13d72e60bb4c62
SSDEEP 49152:TbMfwU3Rv5tYNEfoAaFOnymdqnqohip45QmErHmqu5Dk:nMTBqNCQmkqo4rHmqcg
TLSH
T1EED502C2DAC80677E1A3D77488A21248F3B81F951736D7AB039E01626F326FC9D75762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
4532	2026-08-08_d3d7bd9540f55d35a89acbddcfa32b9a_coinminer_icedid_njrat.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	2026-08-08_d3d7bd9540f55d35a89acbddcfa32b9a_coinminer_icedid_njrat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	2026-08-08_d3d7bd9540f55d35a89acbddcfa32b9a_coinminer_icedid_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-08_d3d7bd9540f55d35a89acbddcfa32b9a_coinminer_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_d3d7bd9540f55d35a89acbddcfa32b9a_coinminer_icedid_njrat.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Enumerates system info in registry
PID:4532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4532-0-0x0000000140000000-0x00000001402B7000-memory.dmp

Download

memory/4532-1-0x0000000140000000-0x00000001402B7000-memory.dmp