Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/10/2026, 22:46

General

  • Target
    2026-10-04_ed6b4c8ee98280a32b4bdcfd36692d20_icedid_njrat.exe
  • Size 4.9MB
  • Sample261004-2p2fvsde56
  • SHA256 0bd07d97f88197c7cb33b2800594a190a4831ef89838dd98211f5a461ac19b8e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-04_ed6b4c8ee98280a32b4bdcfd36692d20_icedid_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-04_ed6b4c8ee98280a32b4bdcfd36692d20_icedid_njrat.exe"
    1⤵
      PID:1112

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          app.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-12A74E5F-9ACA-4C68-9144-A7D463BC0854\app.zip
          • Size 747B
          • SHA256 e831725a1f54b50bb543a93c72928958fecff59ec15a521975386aee1fb52807
          • MD5 SHA1 SHA512 TLSH

          app.exe

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-12A74E5F-9ACA-4C68-9144-A7D463BC0854\extracted\app.exe
          • Size 23B
          • SHA256 4545d3e5dc44ae3b1bd8c77323b716e58c0b131ff32ce9d803589246bd85b623
          • MD5 SHA1 SHA512

          日本語.txt

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-12A74E5F-9ACA-4C68-9144-A7D463BC0854\extracted\nested\日本語.txt
          • Size 20B
          • SHA256 5cd8b734cbe69c6c622a67a01b727a7796f3d911292dba7bec9999a46806b140
          • MD5 SHA1 SHA512

          corrupt.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-1F12A7E7-89DE-4E67-9211-F3EBCE9CA11D\corrupt.zip
          • Size 125B
          • SHA256 6cc0f28288883f4ec21ad435a36822150c3ad838763c98e62257547248112c29
          • MD5 SHA1 SHA512 TLSH

          package.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-21530CD9-F7B7-4055-989D-95F516AED0F7\package.zip
          • Size 257B
          • SHA256 df8b0bc8a6083f83319010758633683fa2fe3e19cf157400be9655f0d0112234
          • MD5 SHA1 SHA512 TLSH

          bad.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-40857DA6-E9A3-4AC1-95F1-56FCC5E6D6C7\bad.zip
          • Size 118B
          • SHA256 1a7fccc5c24141990b950238f88dbf3be9da0373ba7d63e92b06ff48c4f27e4c
          • MD5 SHA1 SHA512 TLSH

          app.exe

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-5A96F75D-9F6F-4AD2-8BF2-48E129ABF1C1\published\app.exe
          • Size 19B
          • SHA256 9bc92412c50204f5652048b3a66ae936e52ba0002e1d5e9a27b3d8af5b9821d8
          • MD5 SHA1 SHA512

          app.zip

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-5F8A871A-3BD5-450D-8043-FE53539ED0CF\app.zip
          • Size 4KB
          • SHA256 6d29359493db9907e764bbb83a098af109f1a2fa4daae56fb4ebec5f8fd38fa6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          current.toml

          • Path C:\Users\Admin\AppData\Local\Temp\.kit-FA9989A8-6050-4C22-ADB8-E9C091533108\installed\current.toml
          • Size 177B
          • SHA256 703a0e70dd6dc7432a64b15088cc479ab22b2ea0cf985282d798f8b1556c92f1
          • MD5 SHA1 SHA512 TLSH