General
- Target 2026-07-03_f0690a3dd690ef423ca28273b8d228bb_icedid_luca-stealer_njrat_stealc
- Size 2.8MB
- Sample260703-lpjcaabv9q
- SHA256 24393abea83d856031e5e086d5cb992d2722931e081afabff5fe8ce1c73a336b
- MD5 f0690a3dd690ef423ca28273b8d228bb
- SHA1 0e8e94ab53af8fd923700b642ac1860f20bfb58b
- SHA512 9204ec69c6917bc9a13413da20365c8845279802bda0d2fa1e78156dbbef63219fda4dd533a5616ed95626e5b65bac4da9deb239a61bc9432677d87f94840dd7
- SSDEEP 49152:SySQxd8OaqcRHmN6ydRZDbaxaK1Elt3YRDDz1yz82hhtVqtnc:S8/bheRiltoD2Kc
- TLSH T1BCD5C047E3B800F8C0A7C178CA16561BEB72780517759BDB16D086AA6F23FE15B7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-03_f0690a3dd690ef423ca28273b8d228bb_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_f0690a3dd690ef423ca28273b8d228bb_icedid_luca-stealer_njrat_stealc
- Size 2.8MB
- SHA256 24393abea83d856031e5e086d5cb992d2722931e081afabff5fe8ce1c73a336b
- MD5 f0690a3dd690ef423ca28273b8d228bb
- SHA1 0e8e94ab53af8fd923700b642ac1860f20bfb58b
- SHA512 9204ec69c6917bc9a13413da20365c8845279802bda0d2fa1e78156dbbef63219fda4dd533a5616ed95626e5b65bac4da9deb239a61bc9432677d87f94840dd7
- SSDEEP 49152:SySQxd8OaqcRHmN6ydRZDbaxaK1Elt3YRDDz1yz82hhtVqtnc:S8/bheRiltoD2Kc
- TLSH T1BCD5C047E3B800F8C0A7C178CA16561BEB72780517759BDB16D086AA6F23FE15B7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.