General
- Target 2026-07-05_6b7e0be7f5481882f9905eaa6c71d025_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 4.6MB
- Sample260705-qa9m5scw51
- SHA256 9a3ca77248359b4f239e48054edda5caec209734de8fecfa3d4d2e3758f3252b
- MD5 6b7e0be7f5481882f9905eaa6c71d025
- SHA1 0f7af9b136acc18832401cb8fb02ef1891c09122
- SHA512 a50a434a7dc602481fe83422fc14847d798bc3b4f82cb696adfb769e8b40cf0a8ec9a5689ec9baeb7b8886fa5c4fe1c2ac6b5fc5fed39653129e2f6738c62eed
- SSDEEP 98304:4ChBjde4klov3ysXTkKGG6ak/DOz+lBIxeL:4UjdV8U3ySkK+j/IsL
- TLSH T1B5261209D5A701F8DCA3C5FD8E829407EB72B8560374DAEB02D1A7111FE76D1AE3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_6b7e0be7f5481882f9905eaa6c71d025_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_6b7e0be7f5481882f9905eaa6c71d025_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_6b7e0be7f5481882f9905eaa6c71d025_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 4.6MB
- SHA256 9a3ca77248359b4f239e48054edda5caec209734de8fecfa3d4d2e3758f3252b
- MD5 6b7e0be7f5481882f9905eaa6c71d025
- SHA1 0f7af9b136acc18832401cb8fb02ef1891c09122
- SHA512 a50a434a7dc602481fe83422fc14847d798bc3b4f82cb696adfb769e8b40cf0a8ec9a5689ec9baeb7b8886fa5c4fe1c2ac6b5fc5fed39653129e2f6738c62eed
- SSDEEP 98304:4ChBjde4klov3ysXTkKGG6ak/DOz+lBIxeL:4UjdV8U3ySkK+j/IsL
- TLSH T1B5261209D5A701F8DCA3C5FD8E829407EB72B8560374DAEB02D1A7111FE76D1AE3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2