General
- Target 2026-05-04_807a2d95b5721f53427e4e40fa09d148_icedid_luca-stealer_njrat_stealc
- Size 1.6MB
- Sample260504-lrfdeafy7v
- SHA256 76430ba8b4b34acea33b9673fec64306ac653f06f19f0937e83aac47900cca5b
- MD5 807a2d95b5721f53427e4e40fa09d148
- SHA1 f064e80bf4049666a0dc726deca17177ea3f218a
- SHA512 cfac1047975b46c8b57a004dcf451fb70d3d16978ff45886feae744f180712d678d0f8470c86010520049bf93b02e05ccac03e302ac4da2e1eac27a6d0db90f6
- SSDEEP 24576:TnZ3QSV8LOqcY85nQ/tbw/2Mkjy6Fr7g0o9:TnZrV8LOrQ/lFTjN4
- TLSH T13D75E02DE3A555FAE6B7D23CC8924506E7723C959BB1C38F0391195A2E337D08E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_807a2d95b5721f53427e4e40fa09d148_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_807a2d95b5721f53427e4e40fa09d148_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_807a2d95b5721f53427e4e40fa09d148_icedid_luca-stealer_njrat_stealc
- Size 1.6MB
- SHA256 76430ba8b4b34acea33b9673fec64306ac653f06f19f0937e83aac47900cca5b
- MD5 807a2d95b5721f53427e4e40fa09d148
- SHA1 f064e80bf4049666a0dc726deca17177ea3f218a
- SHA512 cfac1047975b46c8b57a004dcf451fb70d3d16978ff45886feae744f180712d678d0f8470c86010520049bf93b02e05ccac03e302ac4da2e1eac27a6d0db90f6
- SSDEEP 24576:TnZ3QSV8LOqcY85nQ/tbw/2Mkjy6Fr7g0o9:TnZrV8LOrQ/lFTjN4
- TLSH T13D75E02DE3A555FAE6B7D23CC8924506E7723C959BB1C38F0391195A2E337D08E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1