General
- Target 2026-06-27_8f2b8d03506afa78520869cfe5dda196_icedid_luca-stealer_njrat_stealc
- Size 1.6MB
- Sample260629-frj4psdw6w
- SHA256 ef8ae72f94bf89752f4defcab5b1947702df1b73bc35ad1e50717f7fe72aa8ac
- MD5 8f2b8d03506afa78520869cfe5dda196
- SHA1 e8e020a9554ee0fdf041517691dc66b6ef999afe
- SHA512 a8a0b251529afd798b7e0c76a3361158400a69022789266522e9bde92a05b72692b35807fbb4574d6407c4c557275cade8be055e5afc15f5c4d66113acfcecfe
- SSDEEP 24576:brqLZNpAn7s85ZR9CNwgNs7n3nOAzsRjhm0Ijr/eax8JXO02q3A:CLen7zF9SwAahEjhMjSax84
- TLSH T15A85CF1A63A901E5E1FAE2B4CE824113E7B27C06073197DF03D1E9561FA36E45A7FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_8f2b8d03506afa78520869cfe5dda196_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_8f2b8d03506afa78520869cfe5dda196_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_8f2b8d03506afa78520869cfe5dda196_icedid_luca-stealer_njrat_stealc
- Size 1.6MB
- SHA256 ef8ae72f94bf89752f4defcab5b1947702df1b73bc35ad1e50717f7fe72aa8ac
- MD5 8f2b8d03506afa78520869cfe5dda196
- SHA1 e8e020a9554ee0fdf041517691dc66b6ef999afe
- SHA512 a8a0b251529afd798b7e0c76a3361158400a69022789266522e9bde92a05b72692b35807fbb4574d6407c4c557275cade8be055e5afc15f5c4d66113acfcecfe
- SSDEEP 24576:brqLZNpAn7s85ZR9CNwgNs7n3nOAzsRjhm0Ijr/eax8JXO02q3A:CLen7zF9SwAahEjhMjSax84
- TLSH T15A85CF1A63A901E5E1FAE2B4CE824113E7B27C06073197DF03D1E9561FA36E45A7FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory