2026-07-02_a4c6e2c11476fc191ac6f5687f4ca4dd_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-02_a4c6e2c11476fc191ac6f5687f4ca4dd_icedid_luca-stealer_njrat_stealc
Size 1.4MB
Sample260702-grpvmact6t
SHA256 9877c38f90e50f7e05baf6b4668f7db8d9180627ec9b5d3e3e08b339c42a68c5
MD5 a4c6e2c11476fc191ac6f5687f4ca4dd
SHA1 afa457ac7b2f96f1100b9ecc793d31376a212a82
SHA512 e753b1f544d2af9a01f5b9c93168fcf8a78e784fc733cdb4ef2b1b901305aa6bb00ba7c8ff10eecf7f50e2ca633f1b2995d43f0542ab44196b6f37b495a7d631
SSDEEP 12288:wItcb6Cu708Es1dzvRswFUGLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHz:wIg6Cuw8EsDyrFNyBo4kx929bL3Hnx
TLSH
T1C465D01DB29852F4E17BD334BA824516EAB17C4577619ACB03A07BAB1F376E04F3A311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_a4c6e2c11476fc191ac6f5687f4ca4dd_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-02_a4c6e2c11476fc191ac6f5687f4ca4dd_icedid_luca-stealer_njrat_stealc

.exe 1.4MB

2026-07-02_a4c6e2c11476fc191ac6f5687f4ca4dd_icedid_luca-stealer_njrat_stealc

IMPHASH 4546938420a603bf043caf6cdb815966
SHA256 9877c38f90e50f7e05baf6b4668f7db8d9180627ec9b5d3e3e08b339c42a68c5
MD5 a4c6e2c11476fc191ac6f5687f4ca4dd
SHA1 afa457ac7b2f96f1100b9ecc793d31376a212a82
SHA512 e753b1f544d2af9a01f5b9c93168fcf8a78e784fc733cdb4ef2b1b901305aa6bb00ba7c8ff10eecf7f50e2ca633f1b2995d43f0542ab44196b6f37b495a7d631
SSDEEP 12288:wItcb6Cu708Es1dzvRswFUGLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHz:wIg6Cuw8EsDyrFNyBo4kx929bL3Hnx
TLSH
T1C465D01DB29852F4E17BD334BA824516EAB17C4577619ACB03A07BAB1F376E04F3A311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

265036

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dev\projs\ProcessSupervisor\output\LogViewer.pdb

kernel32

GetFileTime TerminateThread CreateThread DeleteFileW GetFileAttributesW OpenMutexW WaitForSingleObject ReleaseMutex SetEndOfFile CreateFileW WriteFile GlobalUnlock CompareFileTime GetFileSize MultiByteToWideChar SetEvent OpenEventW CreateEventW CloseHandle FindResourceExW FindResourceW LoadResource LockResource SizeofResource GetProcessHeap HeapAlloc FindFirstChangeNotificationW WaitForMultipleObjects Sleep FindNextChangeNotification FindCloseChangeNotification InitializeCriticalSectionEx DeleteCriticalSection DecodePointer SetFilePointer GetLastError GlobalLock ReadFile GlobalAlloc HeapFree HeapReAlloc HeapSize HeapDestroy GetModuleHandleW ExitProcess LoadLibraryW WriteConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW CompareStringOrdinal LoadLibraryExW VirtualProtect GetProcAddress LocalFree WideCharToMultiByte GetCurrentProcess GetUserDefaultUILanguage FreeLibrary GetModuleFileNameW GetStartupInfoW GetCurrentProcessId SetLastError WinExec SystemTimeToFileTime InitializeCriticalSectionAndSpinCount EnterCriticalSection LeaveCriticalSection GetDateFormatW GetTimeFormatW IsDebuggerPresent OutputDebugStringW RaiseException GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetStringTypeW QueryPerformanceCounter WakeAllConditionVariable SleepConditionVariableSRW GetLocaleInfoEx EncodePointer LCMapStringEx CompareStringEx GetCPInfo GetSystemTimeAsFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead RtlUnwindEx RtlPcToFileHeader TlsAlloc TlsGetValue TlsSetValue TlsFree ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetFilePointerEx GetTimeZoneInformation FindClose

user32

InvalidateRect MessageBoxW EndDialog SetDlgItemTextW PostQuitMessage EndPaint BeginPaint DefWindowProcW PostMessageW DialogBoxParamW GetWindowTextW GetWindowTextLengthW GetMenuItemInfoW SystemParametersInfoW SetWindowLongPtrW GetWindowRect GetWindowInfo CloseClipboard SetClipboardData EmptyClipboard OpenClipboard GetKeyState SetWindowPos GetWindowDC UpdateWindow ShowWindow CreateWindowExW RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW LoadAcceleratorsW CallWindowProcW FillRect OffsetRect GetMenuBarInfo SetPropW LoadStringW GetSysColor SendMessageW RedrawWindow SetWindowTextW GetClientRect SetTimer

gdi32

CreateFontIndirectW GetTextExtentPoint32W SetBkColor SetTextColor CreateSolidBrush DeleteObject

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegOpenKeyExW

shell32

SHGetStockIconInfo ShellExecuteW SHGetSpecialFolderPathW SHCreateDirectoryExW

uxtheme

GetThemeColor SetWindowTheme OpenThemeData DrawThemeBackground DrawThemeText CloseThemeData IsThemeActive

comctl32

ord413 ord410

Name

.text

Size

421KB

Virtual Size

421KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

115KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

269KB

Virtual Size

269KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-02_a4c6e2c11476fc191ac6f5687f4ca4dd_icedid_luca-stealer_njrat_stealc

kernel32

user32

gdi32

comdlg32

advapi32

shell32

uxtheme

comctl32

generic