09ee6a14db6855ed081b0275afd2d11ca53803274a40bb8e4ed4c74df79e4d13

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 16:17

Target
2026-09-29_d62a3e95d7dc1e7a8dbb31774f988b64_icedid_luca-stealer_njrat_stealc.exe
Size 5.4MB
Sample260930-trdhtaxt6m
SHA256 09ee6a14db6855ed081b0275afd2d11ca53803274a40bb8e4ed4c74df79e4d13
MD5 d62a3e95d7dc1e7a8dbb31774f988b64
SHA1 977e36df8e232676fde2ff7d7cdff4ceeac2a324
SHA512 bd89fd73001a4d6c295e386d1e36e6fb6b4c21a4a176db3bcb6277185d764a6c98f72dbd5cedb8ccdd4888d3eb110ce67d45f57782d83b54eea4780265a74f63
SSDEEP 98304:eq6X1rOU2LhHF1jljJ65iZ220T65CFLOAkGkzdnEVomFHKnP:eqG3WlZf6K2JeCFLOyomFHKnP
TLSH
T16F46CE4AFAAC0CD8D899D0798537492BFBB2BC1012B1874F4065768B6FBFF514E1A235
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1232	2026-09-29_d62a3e95d7dc1e7a8dbb31774f988b64_icedid_luca-stealer_njrat_stealc.exe
1232	2026-09-29_d62a3e95d7dc1e7a8dbb31774f988b64_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_d62a3e95d7dc1e7a8dbb31774f988b64_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_d62a3e95d7dc1e7a8dbb31774f988b64_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1232