348f14318d3e11c82fecc0a357b03a0d5eaacdd5ab3f83b28e86c40cf3e044d4

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 13:02

Target
2026-11-07_6f6785a56bb0eff12fa4db71fd9bdd05_cryptbot_icedid_njrat_stealc.exe
Size 3.9MB
Sample261107-p91c3sx18k
SHA256 348f14318d3e11c82fecc0a357b03a0d5eaacdd5ab3f83b28e86c40cf3e044d4
MD5 6f6785a56bb0eff12fa4db71fd9bdd05
SHA1 b1081f5f2ccc1a6c54c1c1f388913dfa7df688ed
SHA512 f25006a0cf80dfe0880ef0687aa7592fe797a1f2aa8bbf035450f3bcb3f70b53b0882739d27d3cb8858048c38edad619e7109a73269dbeae8331da9225ec0c3c
SSDEEP 98304:3QL+ZscNedaxsj3f5gJjFgO2qauNwlpC/qs2wtxyN:gL+Zsddaxq3f5g59NwXCd2wON
TLSH
T171162359E7E905FDD0BBD0B8CD824A16D3773C5953A1EACF03A4A9512F272908D3AB13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5156	2026-11-07_6f6785a56bb0eff12fa4db71fd9bdd05_cryptbot_icedid_njrat_stealc.exe
5156	2026-11-07_6f6785a56bb0eff12fa4db71fd9bdd05_cryptbot_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-07_6f6785a56bb0eff12fa4db71fd9bdd05_cryptbot_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-07_6f6785a56bb0eff12fa4db71fd9bdd05_cryptbot_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5156