General
- Target 2026-07-02_c14e6a769ecfa66de2af3f7e5a7e7746_icedid_luca-stealer_njrat_stealc
- Size 1.5MB
- Sample260702-yaxmksh15l
- SHA256 6f6be60af26dfc5b35b43b69127470feb9fd73d53a4398f849e12ccd39a8bb96
- MD5 c14e6a769ecfa66de2af3f7e5a7e7746
- SHA1 112d6e93593161c3314633242f4607dcaa7defa0
- SHA512 de4a30a77b508d3224e31286c66ab502fffa966c100173644c8ccf70da4a80aa37d75784fd9dae6be81796695f37f6573718027ced055db731acc8f9fab6731b
- SSDEEP 24576:axU3MPlEsHosqjnhMgeiCl7G0nehbGZpbD:oU3J9Dmg27RnWGj
- TLSH T16F75F11AE75400F9D077D178C992990AEA737C9E877096CF13E91AA61F336904E3EB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_c14e6a769ecfa66de2af3f7e5a7e7746_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_c14e6a769ecfa66de2af3f7e5a7e7746_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_c14e6a769ecfa66de2af3f7e5a7e7746_icedid_luca-stealer_njrat_stealc
- Size 1.5MB
- SHA256 6f6be60af26dfc5b35b43b69127470feb9fd73d53a4398f849e12ccd39a8bb96
- MD5 c14e6a769ecfa66de2af3f7e5a7e7746
- SHA1 112d6e93593161c3314633242f4607dcaa7defa0
- SHA512 de4a30a77b508d3224e31286c66ab502fffa966c100173644c8ccf70da4a80aa37d75784fd9dae6be81796695f37f6573718027ced055db731acc8f9fab6731b
- SSDEEP 24576:axU3MPlEsHosqjnhMgeiCl7G0nehbGZpbD:oU3J9Dmg27RnWGj
- TLSH T16F75F11AE75400F9D077D178C992990AEA737C9E877096CF13E91AA61F336904E3EB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory