General
- Target 2026-06-04_b131806a7eabd3ccb24f5acfd3524fd6_icedid_luca-stealer_njrat_stealc
- Size 1.3MB
- Sample260604-tnmbjsbt3k
- SHA256 b434feab8abeaeacd7da6b5ca8f994d2ecdda71ce85ee22224c42a947fa5cf15
- MD5 b131806a7eabd3ccb24f5acfd3524fd6
- SHA1 757d6970b1017c3da112c2ab296e72eeaab5275d
- SHA512 d8dc1d4afffeceb9e582a774374b8539b9491f4b2ac2b394566794baeacf12e0e4067b91544d54e6cd33c09768f45eb7559ec53e18e3f4ab983f21b1156128c9
- SSDEEP 24576:x0z8pmC0Fxlc+3nGpl7+1WKe7wxtdykir8q0Hsw47opM6g9+JVuOUj7Cg8:xJpbU87OWK3tdnYz5d6JgCg
- TLSH T1EB55C01A9BE801FCE0FBD575CE915917EBB7780A07B1969F039049AA0F376608F39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_b131806a7eabd3ccb24f5acfd3524fd6_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_b131806a7eabd3ccb24f5acfd3524fd6_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_b131806a7eabd3ccb24f5acfd3524fd6_icedid_luca-stealer_njrat_stealc
- Size 1.3MB
- SHA256 b434feab8abeaeacd7da6b5ca8f994d2ecdda71ce85ee22224c42a947fa5cf15
- MD5 b131806a7eabd3ccb24f5acfd3524fd6
- SHA1 757d6970b1017c3da112c2ab296e72eeaab5275d
- SHA512 d8dc1d4afffeceb9e582a774374b8539b9491f4b2ac2b394566794baeacf12e0e4067b91544d54e6cd33c09768f45eb7559ec53e18e3f4ab983f21b1156128c9
- SSDEEP 24576:x0z8pmC0Fxlc+3nGpl7+1WKe7wxtdykir8q0Hsw47opM6g9+JVuOUj7Cg8:xJpbU87OWK3tdnYz5d6JgCg
- TLSH T1EB55C01A9BE801FCE0FBD575CE915917EBB7780A07B1969F039049AA0F376608F39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1