cb5a5844720fdc880da38e6525537022efc623674e50c44f8d0b708568dd3ed7

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/10/2026, 22:15

Target
2026-10-12_b86347e3b69d7d9898868ded8b1a755b_icedid_mespinoza_njrat_ryuk_stealc.exe
Size 7.1MB
Sample261013-16pmyscs4v
SHA256 cb5a5844720fdc880da38e6525537022efc623674e50c44f8d0b708568dd3ed7
MD5 b86347e3b69d7d9898868ded8b1a755b
SHA1 e279b944765add5fc2a69551992e350c7ba2d648
SHA512 7cc3a4af0a965b87670940b1b97ac42574b88dbb05e71dca51cf9b1b13ebd6a849efe465d19807e447dd6b011c663c10645d2636b5d988dbaa6aee224274d36b
SSDEEP 98304:O2qPEypXqFi8STHYEx07HjCyImtoc3LEV+pWQVQQ3XIuBXQA83j/d:O2qcA848tImecLEV+pWQVQQ3XPQrz/
TLSH
T19C76BF03F79650BDD46BC47882979327A631B44A0B319ADB13C46B352FA37E01F3AB56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5400	2026-10-12_b86347e3b69d7d9898868ded8b1a755b_icedid_mespinoza_njrat_ryuk_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-12_b86347e3b69d7d9898868ded8b1a755b_icedid_mespinoza_njrat_ryuk_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-12_b86347e3b69d7d9898868ded8b1a755b_icedid_mespinoza_njrat_ryuk_stealc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:5400