2026-07-01_45d2912f392250feaf9ec78c9d256b87_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-01_45d2912f392250feaf9ec78c9d256b87_icedid_luca-stealer_njrat_stealc
Size 2.0MB
Sample260701-l1rsssa19k
SHA256 94ebac58ad3023dfb8ac2cb32e12923d9abe7b2e59cd59732c0fd27d6329a3c5
MD5 45d2912f392250feaf9ec78c9d256b87
SHA1 0e0ff4664663de20134fbabf889414dee757836e
SHA512 641d256c9ab84e8ced42a845469a8e2f4baaa327dc5315cff7c42938ed89ba964b54076678cf0ec9012dcc482ec2d7b06fd7f56c7737afd5d3c5c5f8bb96a4bd
SSDEEP 49152:pRi2Rohz4rQ18nu9QOCp6R6wrZnwUQyI3:pj1QPpR6wrZnwUDI
TLSH
T1EAA59E16A7D911B8E0F6D239CE675957DA327848077096EF03C009AA1FB7BE05B37B12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_45d2912f392250feaf9ec78c9d256b87_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-01_45d2912f392250feaf9ec78c9d256b87_icedid_luca-stealer_njrat_stealc

.exe 2.0MB

2026-07-01_45d2912f392250feaf9ec78c9d256b87_icedid_luca-stealer_njrat_stealc

IMPHASH 2b156981f708d139851da07170232add
SHA256 94ebac58ad3023dfb8ac2cb32e12923d9abe7b2e59cd59732c0fd27d6329a3c5
MD5 45d2912f392250feaf9ec78c9d256b87
SHA1 0e0ff4664663de20134fbabf889414dee757836e
SHA512 641d256c9ab84e8ced42a845469a8e2f4baaa327dc5315cff7c42938ed89ba964b54076678cf0ec9012dcc482ec2d7b06fd7f56c7737afd5d3c5c5f8bb96a4bd
SSDEEP 49152:pRi2Rohz4rQ18nu9QOCp6R6wrZnwUQyI3:pj1QPpR6wrZnwUDI
TLSH
T1EAA59E16A7D911B8E0F6D239CE675957DA327848077096EF03C009AA1FB7BE05B37B12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

666140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

recv ntohs htons getsockname connect closesocket bind send inet_pton WSAGetLastError WSACleanup WSAStartup socket setsockopt

user32

DefWindowProcW SendMessageW PeekMessageW DispatchMessageW GetKeyState PostQuitMessage UnregisterClassW RegisterClassExW LoadCursorA ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetClientRect GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetAsyncKeyState CreateWindowExW UnregisterHotKey RegisterHotKey LoadIconW LoadCursorW SetWindowLongPtrW GetWindowLongPtrW GetWindowRect UpdateWindow GetSystemMetrics SetWindowPos SetLayeredWindowAttributes ShowWindow DestroyWindow TranslateMessage

d3d11

D3D11CreateDeviceAndSwapChain

shell32

ShellExecuteW CommandLineToArgvW

dwmapi

DwmSetWindowAttribute

kernel32

IsValidCodePage HeapReAlloc OutputDebugStringW ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetOEMCP HeapFree HeapAlloc WriteFile ExitProcess ReadFile WriteConsoleW GetModuleFileNameW GetFileType GetStdHandle LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx GetCommandLineA GetEnvironmentStringsW GetACP FreeEnvironmentStringsW GetProcessHeap SetStdHandle HeapSize SetEndOfFile InitializeSListHead TerminateProcess GetCurrentProcess GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent GetCommandLineW GetEnvironmentVariableW CloseHandle GetLastError WaitForSingleObject Sleep GetCurrentProcessId CreateRemoteThread GetExitCodeThread OpenProcess GetSystemTime GetTickCount64 VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleHandleW GetProcAddress LoadResource LockResource SizeofResource FindResourceW LocalFree MultiByteToWideChar WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary LoadLibraryA GetLocaleInfoA IsDBCSLeadByte RtlPcToFileHeader RaiseException ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId WakeAllConditionVariable SleepConditionVariableSRW FormatMessageA GetLocaleInfoEx InitOnceBeginInitialize InitOnceComplete RtlUnwind CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesW GetFileAttributesExW GetFullPathNameW SetFileInformationByHandle GetTempPathW AreFileApisANSI MoveFileExW GetFileInformationByHandleEx FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

imm32

ImmSetCompositionWindow ImmGetContext ImmSetCandidateWindow ImmReleaseContext

d3dcompiler_47

D3DCompile

Name

.text

Size

863KB

Virtual Size

863KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

266KB

Virtual Size

266KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

898KB

Virtual Size

898KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-01_45d2912f392250feaf9ec78c9d256b87_icedid_luca-stealer_njrat_stealc

ws2_32

user32

d3d11

shell32

dwmapi

kernel32

imm32

d3dcompiler_47

generic