General
- Target 2026-05-22_24ba8116baa2296670f635e006f75d87_icedid_luca-stealer_njrat_stealc
- Size 2.9MB
- Sample260522-plnpdadv5w
- SHA256 614248fa4cc834b9947321f4405bc1b12609bdecc2ba147358c2dc199da2a9fe
- MD5 24ba8116baa2296670f635e006f75d87
- SHA1 f982f8ac579fea0be455c45dc9a31cf7052acf20
- SHA512 a8376f5a356e8a508782f85128014879d96c69491d8755a5efd06b5237c8e11f0dc8bde538403918fcc63921af732290b6eed56eb075296ce4d6c215d7a26928
- SSDEEP 49152:l3Y3dGiDIKldNDajIT1P2saNoNla+20Z9iv71XyEBXOf:gYiDJdN+eaNEa+20Z9A7c2Of
- TLSH T118E55A09A15770DCC159B07AEA3FEA22D6723C05172086DB26D87E3B3EF6BD1493B611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_24ba8116baa2296670f635e006f75d87_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_24ba8116baa2296670f635e006f75d87_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_24ba8116baa2296670f635e006f75d87_icedid_luca-stealer_njrat_stealc
- Size 2.9MB
- SHA256 614248fa4cc834b9947321f4405bc1b12609bdecc2ba147358c2dc199da2a9fe
- MD5 24ba8116baa2296670f635e006f75d87
- SHA1 f982f8ac579fea0be455c45dc9a31cf7052acf20
- SHA512 a8376f5a356e8a508782f85128014879d96c69491d8755a5efd06b5237c8e11f0dc8bde538403918fcc63921af732290b6eed56eb075296ce4d6c215d7a26928
- SSDEEP 49152:l3Y3dGiDIKldNDajIT1P2saNoNla+20Z9iv71XyEBXOf:gYiDJdN+eaNEa+20Z9A7c2Of
- TLSH T118E55A09A15770DCC159B07AEA3FEA22D6723C05172086DB26D87E3B3EF6BD1493B611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1