General
- Target 2026-07-05_28060f1bbd48fa7ec1b8363f7a258533_agent-tesla_amadey_icedid_luca-stealer_njrat
- Size 2.4MB
- Sample260705-vtbbxaet6z
- SHA256 280d794d53a7da6dd06ddaddd5b29713241dc194e16bb9b11207de2bd2a280fa
- MD5 28060f1bbd48fa7ec1b8363f7a258533
- SHA1 5394dc1c643f9a5d904c5778ee96c018ed817e67
- SHA512 6e3b3dbabb583e851c16ef5f943e2f4e406bf0936e30a2e9b8f310bdba3b032b4b1d7f5892e7fbeac2854dd0ded4b59b70319e1ad43a842c57e09ca301717f3d
- SSDEEP 49152:A1H4jR2TYrQbDTrTHeqtauh+Q9fGMJa7YqrU4u6tBvALfuGz:RUztvtfGMAcqrUF6tBvAju
- TLSH T1C7C5E00573E442DDFEABE1768A13C60BD7B278450773861F06A46A766F33B71262E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-05_28060f1bbd48fa7ec1b8363f7a258533_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_28060f1bbd48fa7ec1b8363f7a258533_agent-tesla_amadey_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_28060f1bbd48fa7ec1b8363f7a258533_agent-tesla_amadey_icedid_luca-stealer_njrat
- Size 2.4MB
- SHA256 280d794d53a7da6dd06ddaddd5b29713241dc194e16bb9b11207de2bd2a280fa
- MD5 28060f1bbd48fa7ec1b8363f7a258533
- SHA1 5394dc1c643f9a5d904c5778ee96c018ed817e67
- SHA512 6e3b3dbabb583e851c16ef5f943e2f4e406bf0936e30a2e9b8f310bdba3b032b4b1d7f5892e7fbeac2854dd0ded4b59b70319e1ad43a842c57e09ca301717f3d
- SSDEEP 49152:A1H4jR2TYrQbDTrTHeqtauh+Q9fGMJa7YqrU4u6tBvALfuGz:RUztvtfGMAcqrUF6tBvAju
- TLSH T1C7C5E00573E442DDFEABE1768A13C60BD7B278450773861F06A46A766F33B71262E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.