General
- Target 2026-07-07_8afd7072bb27a170e0480f3ddf744bcc_icedid_luca-stealer_ngrbot_njrat_stealc
- Size 2.2MB
- Sample260707-jee6rshy2n
- SHA256 9144b3e386b6ea0a69951f8ae618873ecafea91daabf4d2a2e845cebddd11559
- MD5 8afd7072bb27a170e0480f3ddf744bcc
- SHA1 f5fd534626981d5a852d721f8a0bf16b60894d07
- SHA512 f5d0a1eaeb859d497948730dfa7d8b926d675fd8733c43aa9eddc9cb1a2e69add8db94e63816c93b348b48026d3a7b933e0425ed76f6a140c42754629fe9b309
- SSDEEP 24576:WISYKaC2a/XAp97LJYjGhhz35c+El4QKbpVCDhnb5aoDmhmW3KJTGN/:WINKCQwnLJYj0JPv4lbkVhTL
- TLSH T1B8A58E07A7E501ECE0B7D279CE568903D77278090770B7EF069085AA5F73AE05EBA721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
9 signatures
Behavioral task
behavioral1
Sample
2026-07-07_8afd7072bb27a170e0480f3ddf744bcc_icedid_luca-stealer_ngrbot_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_8afd7072bb27a170e0480f3ddf744bcc_icedid_luca-stealer_ngrbot_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_8afd7072bb27a170e0480f3ddf744bcc_icedid_luca-stealer_ngrbot_njrat_stealc
- Size 2.2MB
- SHA256 9144b3e386b6ea0a69951f8ae618873ecafea91daabf4d2a2e845cebddd11559
- MD5 8afd7072bb27a170e0480f3ddf744bcc
- SHA1 f5fd534626981d5a852d721f8a0bf16b60894d07
- SHA512 f5d0a1eaeb859d497948730dfa7d8b926d675fd8733c43aa9eddc9cb1a2e69add8db94e63816c93b348b48026d3a7b933e0425ed76f6a140c42754629fe9b309
- SSDEEP 24576:WISYKaC2a/XAp97LJYjGhhz35c+El4QKbpVCDhnb5aoDmhmW3KJTGN/:WINKCQwnLJYj0JPv4lbkVhTL
- TLSH T1B8A58E07A7E501ECE0B7D279CE568903D77278090770B7EF069085AA5F73AE05EBA721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.