Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 12:00
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
- Size 15.4MB
- Sample260916-n6pazaxyat
- SHA256 c92a468ecdb14e33a012a077163136a2dc95f0d5a6c24d8a7e63e6278fc7a596
- MD5 6868e479c9b329f7ba2e6e9790aa2595
- SHA1 77e0301abcd4fe43532e8dcfb6d83429e45f6c1b
- SHA512 7915e1a0339cac05e22904e04c2f0dc92d981ca9148a99c714b946248775d6a3c396fd3d2f0db0e081da64022ca24ae5de3637c04a200bf8c10669d13e30e887
- SSDEEP 393216:ya07Oz7vOvgV+VWCNr18a1eWM88+J7JZQ:z0CPOvggEwx4WMj
- TLSH T1D0F6330923E502EDFEABE077C616C10BD6B1784606738A5F05A16B627F33B706A6F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3752 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3752 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe 3752 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe 3752 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 3752 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe 3752 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe 3752 2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-16_6868e479c9b329f7ba2e6e9790aa2595_agent-tesla_amadey_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3752
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:904