General
- Target 2026-05-22_bd26b33bf12d3cad681c8124ac6976ff_elex_icedid_luca-stealer_njrat_swisyn
- Size 1.6MB
- Sample260522-2aezbafv7m
- SHA256 a223876a91f76c5b40cfbcdff188ecfa68901c57548b88773c5489673b642a5b
- MD5 bd26b33bf12d3cad681c8124ac6976ff
- SHA1 3e7074efbf3cfeca1b289c77f5cf6ce179b5aa50
- SHA512 96e883c246a031cf869143dcd0ea7c82476de634a557d5e0154427302b1d8208f6b80acac981f1b59ace6d3a8f29ae24d91f13cb21757a0be2cbfcf382a870e6
- SSDEEP 12288:5FUNDaImwW6APE/Xu2uA31/QnWpOL0WlBYLMlUYtwnd8LgST66B7DTSFi14jY:5FOaDCoE/huA3ynWp00WjYQuvY
- TLSH T142756D495B64D97EF363D17D5055E23DEA323C220FC2924602EA52FC1AB732475AFB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_bd26b33bf12d3cad681c8124ac6976ff_elex_icedid_luca-stealer_njrat_swisyn.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_bd26b33bf12d3cad681c8124ac6976ff_elex_icedid_luca-stealer_njrat_swisyn.exe
Resource
win11-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_bd26b33bf12d3cad681c8124ac6976ff_elex_icedid_luca-stealer_njrat_swisyn
- Size 1.6MB
- SHA256 a223876a91f76c5b40cfbcdff188ecfa68901c57548b88773c5489673b642a5b
- MD5 bd26b33bf12d3cad681c8124ac6976ff
- SHA1 3e7074efbf3cfeca1b289c77f5cf6ce179b5aa50
- SHA512 96e883c246a031cf869143dcd0ea7c82476de634a557d5e0154427302b1d8208f6b80acac981f1b59ace6d3a8f29ae24d91f13cb21757a0be2cbfcf382a870e6
- SSDEEP 12288:5FUNDaImwW6APE/Xu2uA31/QnWpOL0WlBYLMlUYtwnd8LgST66B7DTSFi14jY:5FOaDCoE/huA3ynWp00WjYQuvY
- TLSH T142756D495B64D97EF363D17D5055E23DEA323C220FC2924602EA52FC1AB732475AFB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2