96012f98db609139a2151e821eef029a2920473a1be2577a0df15ee229fa261d

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 01:23

Target
2026-09-08_fc7ff71cdbfa27a67f516725cc75b00b_agent-tesla_amadey_icedid_njrat_vidar.exe
Size 31.4MB
Sample260910-brw12stblf
SHA256 96012f98db609139a2151e821eef029a2920473a1be2577a0df15ee229fa261d
MD5 fc7ff71cdbfa27a67f516725cc75b00b
SHA1 d38daf8e4aa811a79ff92db40c3c17425d1cf2ca
SHA512 0a86e92c83ad6b7d8f4fd9b112048fdeac777b3dd27db5a1213b9d4d02dc6c9236330edaaa3aa9b7751b71d2c9838e1e12fe762c1597ea0703d4c5f9c2ef6ff4
SSDEEP 786432:MF8m5Cx7WZ8/0We5Qr81i8+s+Hwmu9+hSzd:diCxi6/Upfr+hSzd
TLSH
T14A7702F635C5A69DC816C87EC392FC7F8A8F78360516A173515CB2E29A2BC007656F0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

themida

Detects executables packed with Themida 1 IoCs

resource	yara_rule
behavioral1/memory/3540-0-0x00007FF637AC0000-0x00007FF639A3C000-memory.dmp	INDICATOR_EXE_Packed_Themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
behavioral1/memory/3540-0-0x00007FF637AC0000-0x00007FF639A3C000-memory.dmp	themida

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
behavioral1/memory/3540-0-0x00007FF637AC0000-0x00007FF639A3C000-memory.dmp	autoit_exe

C:\Users\Admin\AppData\Local\Temp\2026-09-08_fc7ff71cdbfa27a67f516725cc75b00b_agent-tesla_amadey_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-08_fc7ff71cdbfa27a67f516725cc75b00b_agent-tesla_amadey_icedid_njrat_vidar.exe"
1⤵
PID:3540