Analysis
- max time kernel
150s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/07/2026, 00:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
General
- Target 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe
- Size 3.9MB
- Sample260701-ay2dnsds4w
- SHA256 9041bbaf3881b09e939ab4ef634dfedf019a45ef86fbb8199425fcb63556e996
- MD5 12f09ea7356c6c48889084173c8473f5
- SHA1 88d9d9265580925a7f4f0b88eb0dd2ea50ea8a1c
- SHA512 026156fe35d64f968f44341715e07332824155b3604001986fc250bfd212996cc9ccf90b2eb27a9dd0f3de30bb3ced0ebba28a4a9753e4dd7553c5265b5e4e4d
- SSDEEP 98304:si+q7S8iNGvyuantrQqjVFNLX3QA+O/6/GWP:sdrLVFNLX3QAP/iGc
- TLSH T163168D47EEF70099C03AB239C6476223E675B45C077562DF2BBC0634AFB26E05A7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2012 2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2012