ee50a1c82df3d3f9928dcf8c07ffcab6a57bc7b4e21f50de809ea9df4d9a024b

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 15:25

Target
2026-08-23_f54749a953b9fa774dacbbeb86f2cca3_icedid_njrat_ryuk.exe
Size 315KB
Sample260823-stsvvasxes
SHA256 ee50a1c82df3d3f9928dcf8c07ffcab6a57bc7b4e21f50de809ea9df4d9a024b
MD5 f54749a953b9fa774dacbbeb86f2cca3
SHA1 b564f977b36d5e8f0566473133d07866e68b1ec8
SHA512 4dbcff6eaa4893465cb5b81c122e020d9b5c70c43b28f50e99a548ebb8c2b5b3bd7630453d9e2f495b30d42e195b8e788d0748ec7d63b3f0a2ae5c7600d39631
SSDEEP 6144:ZdnaILHCiNhuiog+AOU09cg6/IhuCwFBp5UXBogW/YfOi:rnaYF0zg+AnSnmcBogW/Y1
TLSH
T126643A45B7E540B5F5B78A7D8DB68505DA737C520B30C68F0264827A2F73BD18E3AB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Npcap\NPFInstall.log	2026-08-23_f54749a953b9fa774dacbbeb86f2cca3_icedid_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-23_f54749a953b9fa774dacbbeb86f2cca3_icedid_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-23_f54749a953b9fa774dacbbeb86f2cca3_icedid_njrat_ryuk.exe"
1⤵
- Drops file in Program Files directory
PID:5796