d6bdc00f6482ffda0c577b0a48632e37221871237a508e91a755898c3b1a90e2

Analysis

max time kernel
150s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 08:31

Target
2026-10-28_23cf396eea608f6e0bf52b588c5e6e3f_agent-tesla_icedid_mespinoza_njrat_ryuk_stealc.exe
Size 16.9MB
Sample261030-ke1cdaxy2l
SHA256 d6bdc00f6482ffda0c577b0a48632e37221871237a508e91a755898c3b1a90e2
MD5 23cf396eea608f6e0bf52b588c5e6e3f
SHA1 367b473042f47f48bc2386c49018e989ad63e050
SHA512 58d7553403cd8543445693a291a90449cd3e07e1e6863902c1d35eb65cbd85578c281dde2cc0915073e9a6220bbf7c8883b3b76dfe5a7f00107322eeaa0e5bfe
SSDEEP 196608:+m57t8fRcKMff99vBkpFMvwORxlNj9LEV+pWQVQQ3X3dxKKz/8Bp7nwKxIMq:B8pkffkSoOPlNdKKz/OxS
TLSH
T12607E043F79650BDC067C434C387967BE561344A0B326AEB27C45A252FB2BD08F7A762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3684	2026-10-28_23cf396eea608f6e0bf52b588c5e6e3f_agent-tesla_icedid_mespinoza_njrat_ryuk_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-28_23cf396eea608f6e0bf52b588c5e6e3f_agent-tesla_icedid_mespinoza_njrat_ryuk_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-28_23cf396eea608f6e0bf52b588c5e6e3f_agent-tesla_icedid_mespinoza_njrat_ryuk_stealc.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3684