dbfbb5d4ab2b67997f7eeffb2d8375a49e1e69392dc4660a65f47721f494dc42

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 00:23

Target
2026-08-23_b4eb0d63533bacff5cab50484d99721b_icedid_luca-stealer_njrat_stealc.exe
Size 1.4MB
Sample260824-ap1e1sbq8s
SHA256 dbfbb5d4ab2b67997f7eeffb2d8375a49e1e69392dc4660a65f47721f494dc42
MD5 b4eb0d63533bacff5cab50484d99721b
SHA1 35ab3a597d9480f3a2bf668b4ab93777476399ba
SHA512 4022a40402fc7cf5edd41c2e3dac7cfd4ad69c24555f5740a949a1c2fa79dd0406adbe5f5aa0e55329d09cdbec1730fd57f71d3be9848ec9d828d4a148a1b246
SSDEEP 24576:Nsa7vxLfyDPyyMJk5ExxLDc3HpJgseStYCbClMYh8keS8hz4ol3y/w:NFNLfWPJbWxxX6HpJgseSuC++1z4qUw
TLSH
T19465021BB7A504FDE177C679CD429906E676BC464BA0BA8F03A04DD70E336609D3E362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3268 wrote to memory of 4384	3268	2026-08-23_b4eb0d63533bacff5cab50484d99721b_icedid_luca-stealer_njrat_stealc.exe	89
PID 3268 wrote to memory of 4384	3268	2026-08-23_b4eb0d63533bacff5cab50484d99721b_icedid_luca-stealer_njrat_stealc.exe	89
PID 3268 wrote to memory of 2680	3268	2026-08-23_b4eb0d63533bacff5cab50484d99721b_icedid_luca-stealer_njrat_stealc.exe	92
PID 3268 wrote to memory of 2680	3268	2026-08-23_b4eb0d63533bacff5cab50484d99721b_icedid_luca-stealer_njrat_stealc.exe	92

C:\Users\Admin\AppData\Local\Temp\2026-08-23_b4eb0d63533bacff5cab50484d99721b_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-23_b4eb0d63533bacff5cab50484d99721b_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
  2⤵
  PID:2680

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:864

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1648