General
- Target 2026-06-27_2f4b2322bf5d5a939ac8c9f4a0b84704_icedid_luca-stealer_njrat_stealc_vidar
- Size 5.1MB
- Sample260629-kpyarsbs4r
- SHA256 ea10392d398f33a8dc34e5915ab251fe9a62bd3a69b744b097475ccaeb61a0dc
- MD5 2f4b2322bf5d5a939ac8c9f4a0b84704
- SHA1 4a34ff3db46b2702f66accb5e19cc21d33ab17ce
- SHA512 4c6e64a32ba05049118cb9ee3a1bc09793e1589bb46b48bbb7f744d23ed7988b655c47c9d72a844a7b6ddf3cef1101495e06b04902dc4bf1c872a6625dbc649f
- SSDEEP 49152:owihubgtNRtw8OWnWcyeoCIRiNCCIyBvHZoz3TQpt3:PoWmW4/5QC9
- TLSH T18636C65BEA7651E1C4B9C03DD1D3622BF87138A6833157C7A681AA571B33BE4E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_2f4b2322bf5d5a939ac8c9f4a0b84704_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_2f4b2322bf5d5a939ac8c9f4a0b84704_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_2f4b2322bf5d5a939ac8c9f4a0b84704_icedid_luca-stealer_njrat_stealc_vidar
- Size 5.1MB
- SHA256 ea10392d398f33a8dc34e5915ab251fe9a62bd3a69b744b097475ccaeb61a0dc
- MD5 2f4b2322bf5d5a939ac8c9f4a0b84704
- SHA1 4a34ff3db46b2702f66accb5e19cc21d33ab17ce
- SHA512 4c6e64a32ba05049118cb9ee3a1bc09793e1589bb46b48bbb7f744d23ed7988b655c47c9d72a844a7b6ddf3cef1101495e06b04902dc4bf1c872a6625dbc649f
- SSDEEP 49152:owihubgtNRtw8OWnWcyeoCIRiNCCIyBvHZoz3TQpt3:PoWmW4/5QC9
- TLSH T18636C65BEA7651E1C4B9C03DD1D3622BF87138A6833157C7A681AA571B33BE4E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.