2026-07-07_d1b3d7804272170a8a647e699475e7a0_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-07_d1b3d7804272170a8a647e699475e7a0_icedid_luca-stealer_njrat_stealc
Size 2.7MB
Sample260707-htmcysg15j
SHA256 9efcb11e79cf6fedc24dec120a4e3234f2cc74076777caf362e0a86039b725f3
MD5 d1b3d7804272170a8a647e699475e7a0
SHA1 5d5a5eb52c23f7e1fd7ec550dc0149ee91629cef
SHA512 0c835418cbde55f13f35fe672ada542e452b29398225924f73a32b87e469d4768da631bbc2b35091f794eeed892bc4d5e83dd130275b604b03513534674e0d33
SSDEEP 24576:gZOiHlXpC4I+0IEaiW4joCHtpEZ50obiun7h0lhSMXlJkT/ttjJTxLOGbpBG3g7s:gZVpwmrSzm4unKK/19SYl1
TLSH
T17DD58D83B7DD5959E02679348791DA0FA33274345750829BBFC60AADCABF8E0CB35B41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_d1b3d7804272170a8a647e699475e7a0_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-07_d1b3d7804272170a8a647e699475e7a0_icedid_luca-stealer_njrat_stealc

.exe 2.7MB

2026-07-07_d1b3d7804272170a8a647e699475e7a0_icedid_luca-stealer_njrat_stealc

IMPHASH a339c5ff680e4e0e1a539606faf149f0
SHA256 9efcb11e79cf6fedc24dec120a4e3234f2cc74076777caf362e0a86039b725f3
MD5 d1b3d7804272170a8a647e699475e7a0
SHA1 5d5a5eb52c23f7e1fd7ec550dc0149ee91629cef
SHA512 0c835418cbde55f13f35fe672ada542e452b29398225924f73a32b87e469d4768da631bbc2b35091f794eeed892bc4d5e83dd130275b604b03513534674e0d33
SSDEEP 24576:gZOiHlXpC4I+0IEaiW4joCHtpEZ50obiun7h0lhSMXlJkT/ttjJTxLOGbpBG3g7s:gZVpwmrSzm4unKK/19SYl1
TLSH
T17DD58D83B7DD5959E02679348791DA0FA33274345750829BBFC60AADCABF8E0CB35B41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

604096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmSetWindowAttribute

wininet

InternetCrackUrlA HttpSendRequestA HttpOpenRequestA InternetReadFile InternetConnectA InternetCloseHandle InternetOpenA

kernel32

GetVolumeInformationA CloseHandle QueryPerformanceCounter QueryPerformanceFrequency Sleep GetCurrentProcessId GetTickCount GetModuleFileNameA GetModuleHandleW GetProcAddress GlobalAlloc GlobalUnlock GlobalLock WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW GlobalFree MultiByteToWideChar FreeLibrary LoadLibraryA GetLocaleInfoA GetFileSizeEx GetConsoleOutputCP FlushFileBuffers HeapReAlloc SetFilePointerEx ReadConsoleW GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileAttributesA VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetTimeZoneInformation GetFileType HeapAlloc CreateProcessW GetExitCodeProcess WaitForSingleObject HeapFree WriteFile GetStdHandle GetModuleFileNameW ExitProcess ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx RaiseException IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle RtlPcToFileHeader TerminateProcess HeapSize SetEndOfFile WriteConsoleW CompareStringW CreateFileW GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetLocaleInfoEx WakeAllConditionVariable SleepConditionVariableSRW RtlUnwind FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent InitializeSListHead GetCurrentProcess

user32

LoadCursorW ClientToScreen GetCursorPos SetCursor SetCursorPos GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout GetClipboardData GetAsyncKeyState SetProcessDpiAwarenessContext LoadImageW ScreenToClient GetClientRect UpdateWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW SendMessageW PeekMessageW DispatchMessageW TranslateMessage SystemParametersInfoW GetWindowRect GetSystemMetrics EmptyClipboard SetClipboardData CloseClipboard OpenClipboard SetWindowPos ShowWindow PostMessageW

advapi32

RegQueryValueExW RegEnumValueW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

ShellExecuteW

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

Name

.text

Size

787KB

Virtual Size

787KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

360KB

Virtual Size

359KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_d1b3d7804272170a8a647e699475e7a0_icedid_luca-stealer_njrat_stealc

d3d11

d3dcompiler_47

dwmapi

wininet

kernel32

user32

advapi32

shell32

imm32

generic