Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/04/2026, 12:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_68f05c1a55ff7626e59aef8550260c7c_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_68f05c1a55ff7626e59aef8550260c7c_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-20_68f05c1a55ff7626e59aef8550260c7c_icedid_luca-stealer_njrat_stealc_vidar.exe
- Size 5.1MB
- Sample260420-plbd2ses2z
- SHA256 2fc2ba7544629a2fc81087c56ad6fc437164ee20fb11a9a51ea5e86cc3273fb4
- MD5 68f05c1a55ff7626e59aef8550260c7c
- SHA1 b0d65f986806a762af3064761de93cc6aebe44ef
- SHA512 b60604ba4d6ac1b8a678b652c7e8e4b50d91fb550fc17c2f2f5fe09107c713b52ef3a2a53a90c6a4df2164f8387b6787b95fdd01b012bd0a915cd78dd5a9ceb9
- SSDEEP 49152:owihubgtNRtw8OWnWcyeoCIRiNCCIyBvHZoz3TQptf:PoWmW4/5QC1
- TLSH T1BA36C65BEA7651E1C4B9C03DD1D3622BF87138A6833157C7A681AA571B33BE4E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4712 2026-04-20_68f05c1a55ff7626e59aef8550260c7c_icedid_luca-stealer_njrat_stealc_vidar.exe 4712 2026-04-20_68f05c1a55ff7626e59aef8550260c7c_icedid_luca-stealer_njrat_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-20_68f05c1a55ff7626e59aef8550260c7c_icedid_luca-stealer_njrat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-20_68f05c1a55ff7626e59aef8550260c7c_icedid_luca-stealer_njrat_stealc_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\C1U8OYWU\pixel[2].gif
- Size 42B
- SHA256 ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
- MD5 d89746888da2d9510b64a9f031eaecd5
- SHA1 d5fceb6532643d0d84ffe09c40c481ecdf59e15a
- SHA512 d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c
- MD5 SHA1 SHA512