3515f8e0495f7f1f8ee257809494d2b5f7993915254c21b92c0e8444c4d2713c

General

Target
2026-05-31_25f15d72195c1a7bc8a9eac1d46b7ec5_icedid_luca-stealer_njrat_stealc
Size 2.4MB
Sample260531-sdaz4acz5q
SHA256 3515f8e0495f7f1f8ee257809494d2b5f7993915254c21b92c0e8444c4d2713c
MD5 25f15d72195c1a7bc8a9eac1d46b7ec5
SHA1 a87d72c130444f2e94ce22cc45b77aa8182ca1a2
SHA512 177fa4b4ad9de0585b08853942bc091b3a12f385b00cf978fcd399c5361b7329e46d120b390b91fca6657fa0e0551c5fc65a3131817714eb8819a09c4d8c132f
SSDEEP 24576:/vDS/smf/rQtENLcl1CS9bas5gENo+FmssVGqetNhmxG36fTmFDm:nks4rQdCwbRo+Fm9GqsN936aF
TLSH
T148B5D40D015447DCC97D823654CF26AEA010332C62781FBEB2665DB18F79BD87EE5A8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-05-31_25f15d72195c1a7bc8a9eac1d46b7ec5_icedid_luca-stealer_njrat_stealc
- Size 2.4MB
- SHA256 3515f8e0495f7f1f8ee257809494d2b5f7993915254c21b92c0e8444c4d2713c
- MD5 25f15d72195c1a7bc8a9eac1d46b7ec5
- SHA1 a87d72c130444f2e94ce22cc45b77aa8182ca1a2
- SHA512 177fa4b4ad9de0585b08853942bc091b3a12f385b00cf978fcd399c5361b7329e46d120b390b91fca6657fa0e0551c5fc65a3131817714eb8819a09c4d8c132f
- SSDEEP 24576:/vDS/smf/rQtENLcl1CS9bas5gENo+FmssVGqetNhmxG36fTmFDm:nks4rQdCwbRo+Fm9GqsN936aF
- TLSH
  T148B5D40D015447DCC97D823654CF26AEA010332C62781FBEB2665DB18F79BD87EE5A8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

execution persistence themida upx
- Detects executables packed with ASPack
- Detects executables packed with Enigma
- Detects executables packed with Themida
- Detects executables packed with VMProtect.
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Executes dropped EXE
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

PowerShell

1

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects executables packed with ASPack

Detects executables packed with Enigma

Detects executables packed with Themida

Detects executables packed with VMProtect.

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Themida packer

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2