Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/08/2026, 17:15
General
- Target 2026-08-23_0f1c01ed46ac0f8b1c8628cc9cb228e8_akira_icedid.exe
- Size 430KB
- Sample260824-vsrmhaap7x
- SHA256 19d2a623db7e32d16ea9543224c3703764bb9b0e7362c62d07e515f1532c064a
Malware Config
Extracted
-
njrat
-
im523
-
SOFT
-
45.84.227.157:5012
-
0ec846a435bf91138081ad39491b85bb
-
reg_key
0ec846a435bf91138081ad39491b85bb
-
splitter
|'|'|
Signatures
- Family: njRAT/Bladabindi
Widely used RAT written in .NET.
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-23_0f1c01ed46ac0f8b1c8628cc9cb228e8_akira_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-23_0f1c01ed46ac0f8b1c8628cc9cb228e8_akira_icedid.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4920-0-0x0000000000D90000-0x0000000000E02000-memory.dmp
memory/4920-2-0x00000000054C0000-0x00000000054D0000-memory.dmp
memory/4920-3-0x0000000004EDC000-0x0000000004EDD000-memory.dmp
memory/4920-6-0x0000000004740000-0x00000000050E4000-memory.dmp
memory/4920-5-0x00000000054C0000-0x00000000054CA000-memory.dmp
memory/4920-4-0x00000000054C0000-0x00000000054CA000-memory.dmp
memory/4920-7-0x0000000004740000-0x00000000050E4000-memory.dmp
memory/4920-8-0x0000000004740000-0x00000000050E4000-memory.dmp
memory/4920-9-0x00007FFE0B820000-0x00007FFE0BA83000-memory.dmp
memory/4920-16-0x0000000001D70000-0x0000000001D9A000-memory.dmp
memory/4920-39-0x000000001F3D0000-0x000000001F42F000-memory.dmp
memory/4920-38-0x00000000050F0000-0x00000000051BD000-memory.dmp
memory/4920-37-0x00000000046E0000-0x00000000046FB000-memory.dmp
memory/4920-36-0x00000000046D0000-0x00000000046DC000-memory.dmp
memory/4920-35-0x0000000004670000-0x00000000046CD000-memory.dmp
memory/4920-32-0x0000000004510000-0x000000000457D000-memory.dmp
memory/4920-31-0x0000000004470000-0x0000000004509000-memory.dmp
memory/4920-30-0x0000000003D20000-0x0000000003D3A000-memory.dmp
memory/4920-27-0x0000000003D00000-0x0000000003D1D000-memory.dmp
memory/4920-24-0x0000000003CB0000-0x0000000003CF8000-memory.dmp
memory/4920-23-0x0000000002590000-0x00000000025BF000-memory.dmp
memory/4920-21-0x0000000002180000-0x0000000002223000-memory.dmp
memory/4920-12-0x0000000001910000-0x00000000019AD000-memory.dmp
memory/4920-10-0x0000000001240000-0x0000000001307000-memory.dmp
memory/4920-15-0x0000000001350000-0x0000000001377000-memory.dmp
memory/4920-33-0x0000000004580000-0x000000000461B000-memory.dmp
memory/4920-29-0x00000000042D0000-0x0000000004469000-memory.dmp
memory/4920-28-0x00000000041E0000-0x00000000042B6000-memory.dmp
memory/4920-26-0x0000000003E60000-0x00000000041DC000-memory.dmp
memory/4920-25-0x0000000003D50000-0x0000000003DFD000-memory.dmp
memory/4920-22-0x0000000002230000-0x000000000237B000-memory.dmp
memory/4920-20-0x0000000002050000-0x0000000002171000-memory.dmp
memory/4920-19-0x0000000001F30000-0x0000000002046000-memory.dmp
memory/4920-18-0x0000000001E80000-0x0000000001F27000-memory.dmp
memory/4920-17-0x0000000001DD0000-0x0000000001E79000-memory.dmp
memory/4920-14-0x0000000001BB0000-0x0000000001C62000-memory.dmp
memory/4920-13-0x00000000019B0000-0x0000000001B73000-memory.dmp
memory/4920-11-0x0000000001480000-0x0000000001821000-memory.dmp