2026-07-05_5d52055db1f3b648533e0eec5452f86a_icedid_luca-stealer_njrat

General

Target
2026-07-05_5d52055db1f3b648533e0eec5452f86a_icedid_luca-stealer_njrat
Size 1.4MB
Sample260705-kffdlabs3v
SHA256 6b827806c25698abfd69a20336600e7016d120f7bc891f9a3f317d8185583b7d
MD5 5d52055db1f3b648533e0eec5452f86a
SHA1 6525ff5373b7484e9b9310f5127b5814122a1389
SHA512 941ef6a26eb74ac7d999baccd7fc668ae6b8c5308a85942dc6b8f2a97942bca60a4f069ef94235ca090c8b408635e1881a25ca50dde3870cdfea60ba650eb3e1
SSDEEP 24576:MOARTKwyB3f33Wgs13x91u9Kpg2YXv48lGEJ0l2n9hFkC2cFcmrF:jG+wK3v3fGx+9r2mzeO9Xkucm
TLSH
T18C650217ABA801F8D1A7C175CD52590ADB76FC4A47B0FA4F13D44AA60F376A04E3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_5d52055db1f3b648533e0eec5452f86a_icedid_luca-stealer_njrat

File Explorer

2026-07-05_5d52055db1f3b648533e0eec5452f86a_icedid_luca-stealer_njrat

.exe 1.4MB

2026-07-05_5d52055db1f3b648533e0eec5452f86a_icedid_luca-stealer_njrat

IMPHASH f8aaaabe6a64a1614c6fa24d22aca61f
SHA256 6b827806c25698abfd69a20336600e7016d120f7bc891f9a3f317d8185583b7d
MD5 5d52055db1f3b648533e0eec5452f86a
SHA1 6525ff5373b7484e9b9310f5127b5814122a1389
SHA512 941ef6a26eb74ac7d999baccd7fc668ae6b8c5308a85942dc6b8f2a97942bca60a4f069ef94235ca090c8b408635e1881a25ca50dde3870cdfea60ba650eb3e1
SSDEEP 24576:MOARTKwyB3f33Wgs13x91u9Kpg2YXv48lGEJ0l2n9hFkC2cFcmrF:jG+wK3v3fGx+9r2mzeO9Xkucm
TLSH
T18C650217ABA801F8D1A7C175CD52590ADB76FC4A47B0FA4F13D44AA60F376A04E3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1267308

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

DecodePointer WriteConsoleW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle Sleep CloseHandle WideCharToMultiByte SetConsoleOutputCP ExpandEnvironmentStringsW WaitForSingleObject ReadFile TerminateProcess SetFilePointer CreateFileW OpenProcess CreateEventW GetTickCount64 GetLastError LoadLibraryW GetProcAddress GetCurrentProcessId CreateProcessW FreeLibrary GetTickCount WriteFile CreateNamedPipeW PeekNamedPipe GetCurrentThreadId ConnectNamedPipe ResumeThread QueueUserAPC OpenThread GetModuleHandleW GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar LocalFree FormatMessageA GetLocaleInfoEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer RtlUnwind GetStringTypeW LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess GetEnvironmentStringsW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc IsValidCodePage GetACP GetOEMCP

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_5d52055db1f3b648533e0eec5452f86a_icedid_luca-stealer_njrat

version

kernel32

generic