4980b65fc055490051bf3186b5e4cf9766c476ff2cab7c24cb49f9f0f9506655

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 15:01

Target
2026-10-01_4e5b0fd1dc84dc5d8c49246c68ef6cb3_icedid_mespinoza_njrat_ryuk_stealc.exe
Size 6.9MB
Sample261002-sdznfswsav
SHA256 4980b65fc055490051bf3186b5e4cf9766c476ff2cab7c24cb49f9f0f9506655
MD5 4e5b0fd1dc84dc5d8c49246c68ef6cb3
SHA1 93ea56d0766a3ddb38701e902c6f004769580b59
SHA512 d502e5a591d791c9caf8fa0d3a82be1be7dcf6dce8fe683b5955893e910187ea3761f8f324a4e6529404057bc03a7a0dd11b6bb698f04afb3429e643ec120d3e
SSDEEP 98304:eTuNIbj8TzTc8Ia14HIES6t1UwcaXHuBXRv83j/B:eTuN2D8H1lFe1HNMRkz/B
TLSH
T10A76BF03F78650EDD42BC47886979327A671744A0B319ADB13C467396EA37E01F3AB93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5732	2026-10-01_4e5b0fd1dc84dc5d8c49246c68ef6cb3_icedid_mespinoza_njrat_ryuk_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-01_4e5b0fd1dc84dc5d8c49246c68ef6cb3_icedid_mespinoza_njrat_ryuk_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-01_4e5b0fd1dc84dc5d8c49246c68ef6cb3_icedid_mespinoza_njrat_ryuk_stealc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:5732