Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 06:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe
- Size 5.7MB
- Sample260809-hp988abk4v
- SHA256 bf353ca37fb504d0a8b6776854814a35599ff3cd4724e748eb983c6adcdb44b2
- MD5 3a8b62c6cbaa56820e11dc5064ac7d43
- SHA1 9514d092db6d29bf70f53ba8996fdb4d8e17429b
- SHA512 c604e509eeb841636d52c99df4a5c127f05788192741adeeb3ce2d2d732b85072d24fcafbdfe09002ccdfeef84e4a534ed3496d06557a6f75576e7a3f6412b00
- SSDEEP 49152:TNw+TCpQ1SsRS4+zXM3Ge43KIHdXLhNAyPYwj733dZIGOnxbZG:RSK+SbF
- TLSH T1AB56E716B6FA10D1E1BAC039D503622BED70709A433C52FBA38589C56B707E8EE7D752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 28 IoCs
pid Process 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2592 2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_3a8b62c6cbaa56820e11dc5064ac7d43_icedid_njrat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2592
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\imgui.ini
- Size 113B
- SHA256 def1fa3a39c026ed2131d4d24b3fff8cae388549a028ad9034ee29b5fdef34be
- MD5 5ddb5e55c60dec2313c9f8b21941f790
- SHA1 a20542a7a836c955207a053cca2c61564290afa7
- SHA512 560310a3710a5ff5eb0a373c1135bfe53537de79fdd8284772c695e279e4bd33ec89b18a1a2f446d3830a3aa4232b40e8e422a14f994b4b30bdc378ef58c805e
- TLSH T1E0B092113332591E86BA9060917F6795368C2604684274C2A0840215AE6F522104B6C8
- MD5 SHA1 SHA512 TLSH