Analysis
- max time kernel
149s - max time network
116s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/05/2026, 10:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe
- Size 2.1MB
- Sample260503-mpgdcsfv4s
- SHA256 919086b3810aac2a89fd3f96d46ff99dd04deaa2b825d9c1f28ae125d0c8421c
- MD5 b0c51b367a67185b83a9a537f48359ab
- SHA1 22b954ecacfbfe603faf067a544e1db93a57f77f
- SHA512 51021d5e843f94d20f53a1af7c36088dde9594baa3245c3c3972f6ebfebb9108b1af1f48c753b212283a62a7e54389b7c5bbac5e2f3eb06c6a6209da18d45940
- SSDEEP 49152:yVdp5MJ1p5yfAVK1c3vsyzEBUGRpMHBc89R80G7MnJBn1:yDp5MJ1p5yYY1c3ku8Rpri
- TLSH T137A5BF8AF2A541F9C0A7C17C8A47961BE771780513206BDB27E44E9A3F63BE05F7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1804 2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-03_b0c51b367a67185b83a9a537f48359ab_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1804