General
- Target 2026-06-28_fa65c28b6a70bffbd86b454ed76e20ff_icedid_luca-stealer_njrat_stealc
- Size 1.9MB
- Sample260628-wdvw2sax2x
- SHA256 0a071b44cdf60079527f323240fc51809833783fe8d4c48a284a60613c3d4337
- MD5 fa65c28b6a70bffbd86b454ed76e20ff
- SHA1 603de92d6968b9785384d0fc6e683208feaee403
- SHA512 e4787aefd6b1e5525391f39f041e6e10ae6dbe0366e3100e8f9a8cf05da795ad5341e9fd2610c641bea25ed51edc9b5cb6a85bb10a213060e321a9bf31cd1685
- SSDEEP 24576:NqaCGzZ9rNjt02xxD5bd9G2YZC4dMxwUs1gj2ey9t9loEWWNYxVv30Hg:Ia7BS2xRz9EZXMps0G5hNYxR30
- TLSH T129951216D7D800F9E2BBC17989534415DB727C4E03A1AACF13A859665F37AE08E3EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-28_fa65c28b6a70bffbd86b454ed76e20ff_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_fa65c28b6a70bffbd86b454ed76e20ff_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_fa65c28b6a70bffbd86b454ed76e20ff_icedid_luca-stealer_njrat_stealc
- Size 1.9MB
- SHA256 0a071b44cdf60079527f323240fc51809833783fe8d4c48a284a60613c3d4337
- MD5 fa65c28b6a70bffbd86b454ed76e20ff
- SHA1 603de92d6968b9785384d0fc6e683208feaee403
- SHA512 e4787aefd6b1e5525391f39f041e6e10ae6dbe0366e3100e8f9a8cf05da795ad5341e9fd2610c641bea25ed51edc9b5cb6a85bb10a213060e321a9bf31cd1685
- SSDEEP 24576:NqaCGzZ9rNjt02xxD5bd9G2YZC4dMxwUs1gj2ey9t9loEWWNYxVv30Hg:Ia7BS2xRz9EZXMps0G5hNYxR30
- TLSH T129951216D7D800F9E2BBC17989534415DB727C4E03A1AACF13A859665F37AE08E3EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.