6137856b514eef71c3cf1e64409594021311b9e4acae85eba8e108e226d27c94

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 04:30

Target
2026-08-12_8daf9d785921793a3fb358e9c0a5150a_icedid_luca-stealer_njrat_stealc.exe
Size 16.8MB
Sample260812-e4wgtsvzbv
SHA256 6137856b514eef71c3cf1e64409594021311b9e4acae85eba8e108e226d27c94
MD5 8daf9d785921793a3fb358e9c0a5150a
SHA1 4b096031697720725746468651685045b2f76969
SHA512 c0140ec67471a1fd71028cf2d1b1697417bef076d18df2f2e246c958eecd4e01233b7e6828cc94282f1a7856652957d70b70b6a78a6573b670c356d0d1d8adce
SSDEEP 393216:UNdlNFbcMDHXz+qjgfu6N1NRxHox1gNOkm5uGV:UNDZXzcbNDII5GV
TLSH
T1120723CA8FDA42DDC45B2B341C86239974D472D5B2F9CA9F3ECA3C027551F4A85862B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4352	2026-08-12_8daf9d785921793a3fb358e9c0a5150a_icedid_luca-stealer_njrat_stealc.exe
4352	2026-08-12_8daf9d785921793a3fb358e9c0a5150a_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-12_8daf9d785921793a3fb358e9c0a5150a_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-12_8daf9d785921793a3fb358e9c0a5150a_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4352