df4ad76c2b157fa5482082a17db2f6799f4dbecafbf25d6daf16cbef190fde66

Analysis

max time kernel
150s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/10/2026, 20:54

Target
2026-10-13_01681fb576d6a6060bd8147cb8ed8885_icedid_mespinoza_njrat_ryuk_stealc.exe
Size 7.6MB
Sample261015-zp6dpsstat
SHA256 df4ad76c2b157fa5482082a17db2f6799f4dbecafbf25d6daf16cbef190fde66
MD5 01681fb576d6a6060bd8147cb8ed8885
SHA1 0d1ad2ef217fbf88c06c43ec431145756a90c453
SHA512 416da7e4864bc6e9349466adb97ec5c587ebbbffa1d20664e9ffb8c087e3374219a768c08ac8c9c3f678ab55b4e25602e890d57252e2c940d20a40984622871d
SSDEEP 196608:o2qct8wmti5dAPPOLEV+pWQVQQ3XZFlz/:X8wEi5SPPqz/
TLSH
T1ED86BF03F79650BDD06BC47882975327A671748A0B31AAEF13C466392FA37E01F3A756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5112	2026-10-13_01681fb576d6a6060bd8147cb8ed8885_icedid_mespinoza_njrat_ryuk_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-13_01681fb576d6a6060bd8147cb8ed8885_icedid_mespinoza_njrat_ryuk_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-13_01681fb576d6a6060bd8147cb8ed8885_icedid_mespinoza_njrat_ryuk_stealc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:5112