General
- Target 2026-07-01_808bb86e8ac69c75d23f112e8b7a7032_icedid_luca-stealer_njrat_stealc
- Size 8.3MB
- Sample260701-xpy9aaew9t
- SHA256 1ef0915413f2e828ee6bbfe061026d9279f55d7d14036cf3f0de09c5916124d9
- MD5 808bb86e8ac69c75d23f112e8b7a7032
- SHA1 3ee10e3cf8de0f2e10766426c82fe8f8ad78d6ac
- SHA512 eee83cb817b72dc7cf32a0ce438de7b787f4d71fa735180924900608accb7b40132ac226641a736d925c0381fa1a6064990563bfb89c9fe8b7c82e66beb43f6c
- SSDEEP 98304:UTydJOjFyRUGw3RYzv0s6A42/lsfl89a8zuFt7/fUiNE/cN/pjwDK:UTKjwev0s6A4Qst89FzY7/fvNEYRjw
- TLSH T14B96F1AA92E006B4D2834F7DE54597A1F5503A41FB3A06EF06C54EC72E379C24AFE721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_808bb86e8ac69c75d23f112e8b7a7032_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_808bb86e8ac69c75d23f112e8b7a7032_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_808bb86e8ac69c75d23f112e8b7a7032_icedid_luca-stealer_njrat_stealc
- Size 8.3MB
- SHA256 1ef0915413f2e828ee6bbfe061026d9279f55d7d14036cf3f0de09c5916124d9
- MD5 808bb86e8ac69c75d23f112e8b7a7032
- SHA1 3ee10e3cf8de0f2e10766426c82fe8f8ad78d6ac
- SHA512 eee83cb817b72dc7cf32a0ce438de7b787f4d71fa735180924900608accb7b40132ac226641a736d925c0381fa1a6064990563bfb89c9fe8b7c82e66beb43f6c
- SSDEEP 98304:UTydJOjFyRUGw3RYzv0s6A42/lsfl89a8zuFt7/fUiNE/cN/pjwDK:UTKjwev0s6A4Qst89FzY7/fvNEYRjw
- TLSH T14B96F1AA92E006B4D2834F7DE54597A1F5503A41FB3A06EF06C54EC72E379C24AFE721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1