Analysis

  • max time kernel
    149s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/10/2026, 22:46

General

  • Target
    2026-10-04_ed6b4c8ee98280a32b4bdcfd36692d20_icedid_njrat.exe
  • Size 4.9MB
  • Sample261004-2p2fvsde56
  • SHA256 0bd07d97f88197c7cb33b2800594a190a4831ef89838dd98211f5a461ac19b8e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-04_ed6b4c8ee98280a32b4bdcfd36692d20_icedid_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-04_ed6b4c8ee98280a32b4bdcfd36692d20_icedid_njrat.exe"
    1⤵
      PID:1668

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          app.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-133FC132-7605-43B3-BCBA-22F1D6E2A2BC\app.zip
          • Size 4KB
          • SHA256 6d29359493db9907e764bbb83a098af109f1a2fa4daae56fb4ebec5f8fd38fa6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          app.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-3306CC36-6A9A-4FBE-892B-4FF106B681D0\app.zip
          • Size 747B
          • SHA256 e831725a1f54b50bb543a93c72928958fecff59ec15a521975386aee1fb52807
          • MD5 SHA1 SHA512 TLSH

          app.exe

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-3306CC36-6A9A-4FBE-892B-4FF106B681D0\extracted\app.exe
          • Size 23B
          • SHA256 4545d3e5dc44ae3b1bd8c77323b716e58c0b131ff32ce9d803589246bd85b623
          • MD5 SHA1 SHA512

          日本語.txt

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-3306CC36-6A9A-4FBE-892B-4FF106B681D0\extracted\nested\日本語.txt
          • Size 20B
          • SHA256 5cd8b734cbe69c6c622a67a01b727a7796f3d911292dba7bec9999a46806b140
          • MD5 SHA1 SHA512

          current.toml

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-4694F8AA-3AD2-4F90-8224-E993BCC2C9DB\installed\current.toml
          • Size 213B
          • SHA256 f8013ca2487f743012b63e77e0c150e5c89db0222dbff81167849684e24a2568
          • MD5 SHA1 SHA512 TLSH

          package.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-5FB7DBF5-960A-49E0-8443-BC2085D30748\package.zip
          • Size 257B
          • SHA256 df8b0bc8a6083f83319010758633683fa2fe3e19cf157400be9655f0d0112234
          • MD5 SHA1 SHA512 TLSH

          current.toml

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-6EEB3CC1-B19D-4641-B7B2-7F761D6946FA\current.toml
          • Size 3B
          • SHA256 11507a0e2f5e69d5dfa40a62a1bd7b6ee57e6bcd85c67c9b8431b36fff21c437
          • MD5 SHA1 SHA512

          app.exe

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-73397C74-AF15-48C9-A0A6-913FE1BCC949\published\app.exe
          • Size 19B
          • SHA256 9bc92412c50204f5652048b3a66ae936e52ba0002e1d5e9a27b3d8af5b9821d8
          • MD5 SHA1 SHA512

          bad.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-8CD83C43-8FA3-4254-A0B7-C04BBD8D5CC9\bad.zip
          • Size 118B
          • SHA256 1a7fccc5c24141990b950238f88dbf3be9da0373ba7d63e92b06ff48c4f27e4c
          • MD5 SHA1 SHA512 TLSH

          corrupt.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-C50D11D8-29A6-4F22-B825-7F304E7707DC\corrupt.zip
          • Size 125B
          • SHA256 6cc0f28288883f4ec21ad435a36822150c3ad838763c98e62257547248112c29
          • MD5 SHA1 SHA512 TLSH