Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/08/2026, 01:38
General
- Target 2026-08-19_84c85dc9d805498117345d293dbffc8c_icedid_njrat.exe
- Size 1.2MB
- Sample260820-b2e6aaxgja
- SHA256 4c59952db37fbca61c74439d363e35033af4e0f204103bac968cc57dde67a344
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-19_84c85dc9d805498117345d293dbffc8c_icedid_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-19_84c85dc9d805498117345d293dbffc8c_icedid_njrat.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\RTCore64.sysC:\Users\Admin\AppData\Local\Temp\RTCore64.sys1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
RTCore64.sys
memory/5116-3-0x0000000000010000-0x0000000000016000-memory.dmp
memory/5904-0-0x00007FF66DA90000-0x00007FF66DC3F000-memory.dmp
memory/5904-4-0x00007FF66DA90000-0x00007FF66DC3F000-memory.dmp