Analysis
- max time kernel
149s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
18/08/2026, 04:42
General
- Target 2026-08-18_f5b87912f355d2721d4faf56d99188df_akira_icedid.exe
- Size 425KB
- Sample260818-fbqasawdnf
- SHA256 ea164eb435eb5b18bfb805c659c769a266dff7a8114a546682d3090d5d6a6b4f
Malware Config
Extracted
-
njrat
-
im523
-
SOFT
-
45.84.227.157:5012
-
0ec846a435bf91138081ad39491b85bb
-
reg_key
0ec846a435bf91138081ad39491b85bb
-
splitter
|'|'|
Signatures
- Family: njRAT/Bladabindi
Widely used RAT written in .NET.
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-18_f5b87912f355d2721d4faf56d99188df_akira_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-18_f5b87912f355d2721d4faf56d99188df_akira_icedid.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5368-1-0x0000000000460000-0x00000000004D1000-memory.dmp
memory/5368-2-0x000000000452C000-0x000000000452D000-memory.dmp
memory/5368-3-0x0000000004C10000-0x0000000004C20000-memory.dmp
memory/5368-4-0x0000000003D90000-0x0000000004734000-memory.dmp
memory/5368-5-0x0000000003D90000-0x0000000004734000-memory.dmp
memory/5368-6-0x0000000003D90000-0x0000000004734000-memory.dmp
memory/5368-7-0x0000000003D90000-0x0000000004734000-memory.dmp
memory/5368-9-0x0000000000900000-0x00000000009C7000-memory.dmp
memory/5368-8-0x0000000000460000-0x00000000004D1000-memory.dmp
memory/5368-11-0x0000000000FB0000-0x000000000104D000-memory.dmp
memory/5368-12-0x0000000001050000-0x0000000001213000-memory.dmp
memory/5368-13-0x0000000001280000-0x0000000001332000-memory.dmp
memory/5368-20-0x0000000001850000-0x00000000018F3000-memory.dmp
memory/5368-24-0x0000000003440000-0x00000000034ED000-memory.dmp
memory/5368-25-0x0000000003790000-0x0000000003B0C000-memory.dmp
memory/5368-27-0x00000000035A0000-0x0000000003676000-memory.dmp
memory/5368-30-0x00000000034F0000-0x0000000003589000-memory.dmp
memory/5368-31-0x0000000003680000-0x00000000036ED000-memory.dmp
memory/5368-36-0x0000000003740000-0x000000000375B000-memory.dmp
memory/5368-68-0x0000000004BA0000-0x0000000004BFF000-memory.dmp
memory/5368-71-0x0000000023570000-0x00000000236C9000-memory.dmp
memory/5368-81-0x00000000250D0000-0x0000000025238000-memory.dmp
memory/5368-74-0x0000000024DE0000-0x00000000250C3000-memory.dmp
memory/5368-82-0x0000000025240000-0x000000002524C000-memory.dmp
memory/5368-73-0x00000000244B0000-0x00000000245D5000-memory.dmp
memory/5368-72-0x0000000024130000-0x0000000024274000-memory.dmp
memory/5368-70-0x0000000022050000-0x00000000220FC000-memory.dmp
memory/5368-69-0x000000001EB30000-0x000000001EC5F000-memory.dmp
memory/5368-67-0x00000000047A0000-0x000000000486D000-memory.dmp
memory/5368-35-0x0000000003730000-0x000000000373C000-memory.dmp
memory/5368-34-0x0000000004740000-0x000000000479D000-memory.dmp
memory/5368-33-0x0000000003D90000-0x0000000004734000-memory.dmp
memory/5368-32-0x0000000003CF0000-0x0000000003D8B000-memory.dmp
memory/5368-28-0x0000000003B10000-0x0000000003CA9000-memory.dmp
memory/5368-29-0x0000000001A00000-0x0000000001A1A000-memory.dmp
memory/5368-26-0x00000000019E0000-0x00000000019FD000-memory.dmp
memory/5368-21-0x0000000001B50000-0x0000000001C9B000-memory.dmp
memory/5368-19-0x0000000001720000-0x0000000001841000-memory.dmp
memory/5368-18-0x0000000001600000-0x0000000001716000-memory.dmp
memory/5368-17-0x0000000001550000-0x00000000015F7000-memory.dmp
memory/5368-22-0x0000000001910000-0x000000000193F000-memory.dmp
memory/5368-16-0x00000000014A0000-0x0000000001549000-memory.dmp
memory/5368-10-0x0000000000BC0000-0x0000000000F61000-memory.dmp
memory/5368-23-0x0000000001990000-0x00000000019D8000-memory.dmp
memory/5368-14-0x0000000001220000-0x0000000001247000-memory.dmp
memory/5368-15-0x0000000001440000-0x000000000146A000-memory.dmp