87bbc4dad2a456fb88f47178a05a59124814e08ff7f615f25a81383e966798a5

General

Target
2026-04-24_99be81e7ab69d8bc2ba04bea5de003a1_icedid_luca-stealer_njrat
Size 50.3MB
Sample260424-tz3gxae15l
SHA256 87bbc4dad2a456fb88f47178a05a59124814e08ff7f615f25a81383e966798a5
MD5 99be81e7ab69d8bc2ba04bea5de003a1
SHA1 d1fb0b8c284c3d4ec8d05fce0f61cb33c2e5dc83
SHA512 a2e9313f87253feb616adfaf452c1394e43f17fba32db337e9b5b05e2e3d565076d7f6bc1b3ead042d276b25ed06d63811fd51229f41c11517da98c4c0375686
SSDEEP 6144:zhnQtOVfyO52IuYzuk+OUxufj31U8+Njseu4444444444444444444444444444w:zhQEV6nIJ0Jqhcl
TLSH
T1F1C77D1F48DAE0795355C683312021097A6BE3E782BC1FF26CA678D54E323A3DFA5479
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-04-24_99be81e7ab69d8bc2ba04bea5de003a1_icedid_luca-stealer_njrat
- Size 50.3MB
- SHA256 87bbc4dad2a456fb88f47178a05a59124814e08ff7f615f25a81383e966798a5
- MD5 99be81e7ab69d8bc2ba04bea5de003a1
- SHA1 d1fb0b8c284c3d4ec8d05fce0f61cb33c2e5dc83
- SHA512 a2e9313f87253feb616adfaf452c1394e43f17fba32db337e9b5b05e2e3d565076d7f6bc1b3ead042d276b25ed06d63811fd51229f41c11517da98c4c0375686
- SSDEEP 6144:zhnQtOVfyO52IuYzuk+OUxufj31U8+Njseu4444444444444444444444444444w:zhQEV6nIJ0Jqhcl
- TLSH
  T1F1C77D1F48DAE0795355C683312021097A6BE3E782BC1FF26CA678D54E323A3DFA5479
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery evasion persistence spyware stealer trojan
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender TamperProtection settings
  evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Windows security modification
  defense_evasion trojan
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2