Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
05/07/2026, 01:42
General
- Target 2026-07-05_3a28de9c285463aa749969c856762ea4_icedid_luca-stealer_njrat_stealc.exe
- Size 1.4MB
- Sample260705-b4yemsbz8n
- SHA256 1b124828046ce47b318031073442653fa2d45ccfae5754b8884171829236fc5f
Malware Config
Signatures
- Checks system information in the registry 2 TTPs 1 IoCs
System information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-05_3a28de9c285463aa749969c856762ea4_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-05_3a28de9c285463aa749969c856762ea4_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Checks system information in the registry
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\cmd.execmd.exe /c exit /b 02⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1676-8-0x0000020DB7120000-0x0000020DB7121000-memory.dmp
memory/1676-7-0x0000020DB62D0000-0x0000020DB62D1000-memory.dmp
memory/1676-6-0x00007FFE7B6E0000-0x00007FFE7B943000-memory.dmp
memory/1676-13-0x0000020DBACE0000-0x0000020DBACE1000-memory.dmp
memory/1676-12-0x0000020DBACD0000-0x0000020DBACD1000-memory.dmp
memory/1676-11-0x0000020DBAA80000-0x0000020DBAA81000-memory.dmp
memory/1676-10-0x0000020DBA9F0000-0x0000020DBA9F1000-memory.dmp
memory/1676-9-0x0000020DB95D0000-0x0000020DB95D1000-memory.dmp
memory/1676-0-0x0000000140000000-0x000000014095C000-memory.dmp
memory/1676-14-0x0000020DBBF30000-0x0000020DBBF31000-memory.dmp
memory/1676-16-0x0000020DBBF50000-0x0000020DBBF51000-memory.dmp
memory/1676-15-0x0000020DBBF40000-0x0000020DBBF41000-memory.dmp