2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc
Size 3.9MB
Sample260701-ay2dnsds4w
SHA256 9041bbaf3881b09e939ab4ef634dfedf019a45ef86fbb8199425fcb63556e996
MD5 12f09ea7356c6c48889084173c8473f5
SHA1 88d9d9265580925a7f4f0b88eb0dd2ea50ea8a1c
SHA512 026156fe35d64f968f44341715e07332824155b3604001986fc250bfd212996cc9ccf90b2eb27a9dd0f3de30bb3ced0ebba28a4a9753e4dd7553c5265b5e4e4d
SSDEEP 98304:si+q7S8iNGvyuantrQqjVFNLX3QA+O/6/GWP:sdrLVFNLX3QAP/iGc
TLSH
T163168D47EEF70099C03AB239C6476223E675B45C077562DF2BBC0634AFB26E05A7A714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc

File Explorer

2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc

.exe 3.9MB

2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc

IMPHASH c02ac91db4c5e4f3cf622eba5e5523e6
SHA256 9041bbaf3881b09e939ab4ef634dfedf019a45ef86fbb8199425fcb63556e996
MD5 12f09ea7356c6c48889084173c8473f5
SHA1 88d9d9265580925a7f4f0b88eb0dd2ea50ea8a1c
SHA512 026156fe35d64f968f44341715e07332824155b3604001986fc250bfd212996cc9ccf90b2eb27a9dd0f3de30bb3ced0ebba28a4a9753e4dd7553c5265b5e4e4d
SSDEEP 98304:si+q7S8iNGvyuantrQqjVFNLX3QA+O/6/GWP:sdrLVFNLX3QAP/iGc
TLSH
T163168D47EEF70099C03AB239C6476223E675B45C077562DF2BBC0634AFB26E05A7A714
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2236080

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\Trainer\Fatekeeper old2\x64\Release\Trainer.pdb

d3d11

D3D11CreateDeviceAndSwapChain

winmm

PlaySoundA timeBeginPeriod timeEndPeriod

kernel32

GetCurrentThreadId GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection EnterCriticalSection TryEnterCriticalSection LeaveCriticalSection CreateSemaphoreW WaitForSingleObjectEx ReleaseSemaphore TerminateProcess ExitProcess GetSystemInfo GlobalMemoryStatusEx CreateThread GetCurrentThread AddVectoredExceptionHandler RaiseException RemoveVectoredExceptionHandler SetThreadPriority GetLocaleInfoW GetSystemTimeAsFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime SetThreadExecutionState QueryPerformanceCounter QueryPerformanceFrequency CreateEventW Sleep LoadLibraryW IsWow64Process CreateFileA GetTickCount EnumResourceNamesW GetProcessHeap HeapFree VerSetConditionMask VerifyVersionInfoW GetOverlappedResult ResetEvent CancelIo DeviceIoControl FormatMessageW LoadLibraryExW GetCommandLineW HeapAlloc LocalFree GetModuleFileNameW FormatMessageA WaitForMultipleObjects GetFileTime TlsAlloc TlsGetValue TlsSetValue TlsFree FindFirstFileExW FindNextFileW GetLogicalDrives FindClose GetFileAttributesExW DeleteFileW RemoveDirectoryW MoveFileExW CopyFileExW CreateDirectoryW GetCurrentDirectoryW CreatePipe SetNamedPipeHandleState SetHandleInformation WriteConsoleW CreateProcessW GenerateConsoleCtrlEvent GetExitCodeProcess GetModuleHandleExW SetFilePointerEx CompareStringA SetEvent MulDiv GetSystemPowerStatus GetLocaleInfoA FlsAlloc ReadConsoleW SetConsoleCtrlHandler FreeLibraryAndExitThread ExitThread RtlPcToFileHeader RtlUnwindEx GetStringTypeW TryAcquireSRWLockExclusive GetCPInfo CompareStringEx DecodePointer EncodePointer InitializeCriticalSectionEx LCMapStringEx InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue FlsFree VirtualProtect GetFileSizeEx GetFileType GetModuleHandleW OutputDebugStringW GetConsoleMode GetStdHandle AttachConsole CreateFileW SetErrorMode FlushFileBuffers WriteFile SetFilePointer GetLastError DuplicateHandle LCMapStringW FlsGetValue IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA FreeLibrary GetProcAddress LoadLibraryA GetEnvironmentVariableA VirtualQueryEx VirtualFreeEx ReadProcessMemory VirtualAllocEx VirtualProtectEx ReadFile CloseHandle Process32Next CreateToolhelp32Snapshot OpenProcess GetSystemDefaultLangID GetModuleHandleA Module32First WaitForSingleObject Module32Next GetCurrentProcess WriteProcessMemory Process32First GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc MultiByteToWideChar OutputDebugStringA HeapSize SetEndOfFile GlobalSize RtlUnwind SetStdHandle

user32

RegisterClipboardFormatW SetLayeredWindowAttributes SetWindowsHookExW GetKeyboardState IntersectRect ClipCursor PtInRect GetClipCursor SetActiveWindow SetFocus AttachThreadInput EnableWindow SetWindowLongW CreateIconFromResource SetWindowTextW RemovePropW FlashWindowEx GetWindowTextW GetWindowTextLengthW ShowWindow EnumDisplayDevicesW ChangeDisplaySettingsExW EnumDisplaySettingsW EnumDisplayMonitors EnumWindows GetDesktopWindow GetMessageW PostThreadMessageW GetRawInputData ReleaseCapture ReleaseDC CreateIconIndirect SetParent GetClipboardFormatNameA EndDialog SystemParametersInfoW GetDlgItem DialogBoxIndirectParamW SystemParametersInfoA DrawTextW GetQueueStatus UnhookWindowsHookEx SetPropW RegisterClassW EnableMenuItem SetMenuItemInfoW InsertMenuW DestroyMenu DeleteMenu CreatePopupMenu SetWindowLongPtrW CreateWindowExW CheckMenuItem TrackPopupMenu SetCapture DestroyCursor SetForegroundWindow RegisterWindowMessageW GetWindowLongPtrW GetMessageA RegisterDeviceNotificationW CreateWindowExA RegisterClassExA UnregisterClassA DestroyWindow UnregisterDeviceNotification UnregisterClassW GetClassInfoExW DestroyIcon RegisterClassExW LoadIconW DispatchMessageW CreateIconFromResourceEx LoadCursorW SetCursorPos EnumClipboardFormats IsClipboardFormatAvailable GetClipboardSequenceNumber ToUnicode GetKeyboardLayout IsWindow TranslateMessage MsgWaitForMultipleObjects PeekMessageW GetMessageTime GetKeyState GetForegroundWindow ClientToScreen FillRect GetDC GetClientRect IsZoomed IsIconic AdjustWindowRectEx GetMenu SetRectEmpty TrackMouseEvent SetCursor ValidateRect EndPaint BeginPaint GetWindowLongW GetUpdateRect GetMonitorInfoW MonitorFromPoint MonitorFromWindow GetWindowPlacement PostMessageW ScreenToClient SendMessageW KillTimer SetTimer GetMessagePos GetMessageExtraInfo CallWindowProcW DefWindowProcW GetPropW GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics MapVirtualKeyW GetRawInputBuffer CallNextHookEx RegisterWindowMessageA GetDoubleClickTime MessageBoxA GetWindowThreadProcessId GetWindowRect GetFocus SetWindowPos RegisterRawInputDevices FindWindowA GetCursorPos GetAsyncKeyState OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData SetWindowRgn GetMenuItemInfoW

gdi32

CreateRectRgn GetPixelFormat DescribePixelFormat SetPixelFormat GetICMProfileW GetDeviceCaps CombineRgn ChoosePixelFormat SwapBuffers CreateFontIndirectW GetTextMetricsW GetTextExtentPoint32A GetDIBits CreateCompatibleBitmap CreateDCW DeleteDC SetPixel SelectObject CreateCompatibleDC CreateBitmap CreateDIBSection BitBlt CreateSolidBrush DeleteObject

comdlg32

GetOpenFileNameA

advapi32

LookupPrivilegeValueA RegCloseKey RegQueryValueExW RegOpenKeyExW OpenProcessToken AdjustTokenPrivileges

shell32

Shell_NotifyIconW SHGetPathFromIDListW SHBrowseForFolderW DragAcceptFiles SHGetFolderPathW CommandLineToArgvW DragFinish DragQueryFileW ShellExecuteW

ole32

ReleaseStgMedium CoCreateInstance CoTaskMemFree CoUninitialize CoInitializeEx OleUninitialize OleInitialize PropVariantClear CLSIDFromString RevokeDragDrop RegisterDragDrop

oleaut32

SysFreeString

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmAssociateContext ImmGetCompositionFontW ImmNotifyIME ImmSetCompositionStringW ImmGetCompositionStringW ImmGetIMEFileNameA ImmGetCandidateListW ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

setupapi

SetupDiGetDeviceRegistryPropertyW CM_Get_Device_IDA SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetClassDevsA CM_Locate_DevNodeA CM_Get_Parent SetupDiGetDeviceInstanceIdA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

756KB

Virtual Size

756KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

729KB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

93KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_12f09ea7356c6c48889084173c8473f5_icedid_luca-stealer_njrat_qakbot_stealc

d3d11

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

imm32

d3dcompiler_47

setupapi

version

generic