General
- Target 2026-07-03_81963f474d71ab3a5aaca437f1bd1ecf_icedid_luca-stealer_njrat_stealc
- Size 1.6MB
- Sample260703-rey8msaw41
- SHA256 d9401acb4c19c09da334db32a98d38835fd7652ffd3374e4bfaa8938447f7aea
- MD5 81963f474d71ab3a5aaca437f1bd1ecf
- SHA1 9fc2ccf68e20810728356e346e628d986648df19
- SHA512 8f8d6d5d97554876cbfc7a27bcd2c7975d64b09eee402361ccf7643d77ec81ee3b72f17c81961a2ecd0dbbc271a34d878e1d962e5a37a3acf2fa5de49deeef61
- SSDEEP 24576:eNYW1EKHo6mAfOvrhvVULUfUKOUsqjnhMgeiCl7G0nehbGZpbD:Z6uBDmg27RnWGj
- TLSH T1FC75D06AD7A803FDD1B7D174C9C28906FB77784907B15A8F03E449B66F272A04E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_81963f474d71ab3a5aaca437f1bd1ecf_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_81963f474d71ab3a5aaca437f1bd1ecf_icedid_luca-stealer_njrat_stealc
- Size 1.6MB
- SHA256 d9401acb4c19c09da334db32a98d38835fd7652ffd3374e4bfaa8938447f7aea
- MD5 81963f474d71ab3a5aaca437f1bd1ecf
- SHA1 9fc2ccf68e20810728356e346e628d986648df19
- SHA512 8f8d6d5d97554876cbfc7a27bcd2c7975d64b09eee402361ccf7643d77ec81ee3b72f17c81961a2ecd0dbbc271a34d878e1d962e5a37a3acf2fa5de49deeef61
- SSDEEP 24576:eNYW1EKHo6mAfOvrhvVULUfUKOUsqjnhMgeiCl7G0nehbGZpbD:Z6uBDmg27RnWGj
- TLSH T1FC75D06AD7A803FDD1B7D174C9C28906FB77784907B15A8F03E449B66F272A04E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1