General
- Target 2026-07-09_147f2ae49c1276ec1e38f05222389ee8_coinminer_icedid_luca-stealer_njrat_stealc
- Size 9.1MB
- Sample260709-12dpwsas6k
- SHA256 58c62394cca5b250877ce6ec31a31b64cd003f2847b8d01f5b33e1d5c8aaefdf
- MD5 147f2ae49c1276ec1e38f05222389ee8
- SHA1 2a526bf824dca3c2f5fb6e2b8d24ad826343e8cb
- SHA512 0f608d21ace8de39e332eeae19623db52c0b81ba233bdab45bf4e2521551c472301e3f7064673473bd674c090926befd680ce1affc1bfc2704f04dff606d3c41
- SSDEEP 98304:m8Luchxt1NZSWwpSVdvkUtjSEzNDxxg1bzyhDx3rGHYlnkVAih6UC:BSc39ZLwsvkWzTxuyxxbG4lnkVcU
- TLSH T1A1A6E15EA27623E4C07AC0389123751BF9B1345D877897E7B7DA5B8227A27E0E93D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_147f2ae49c1276ec1e38f05222389ee8_coinminer_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_147f2ae49c1276ec1e38f05222389ee8_coinminer_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_147f2ae49c1276ec1e38f05222389ee8_coinminer_icedid_luca-stealer_njrat_stealc
- Size 9.1MB
- SHA256 58c62394cca5b250877ce6ec31a31b64cd003f2847b8d01f5b33e1d5c8aaefdf
- MD5 147f2ae49c1276ec1e38f05222389ee8
- SHA1 2a526bf824dca3c2f5fb6e2b8d24ad826343e8cb
- SHA512 0f608d21ace8de39e332eeae19623db52c0b81ba233bdab45bf4e2521551c472301e3f7064673473bd674c090926befd680ce1affc1bfc2704f04dff606d3c41
- SSDEEP 98304:m8Luchxt1NZSWwpSVdvkUtjSEzNDxxg1bzyhDx3rGHYlnkVAih6UC:BSc39ZLwsvkWzTxuyxxbG4lnkVcU
- TLSH T1A1A6E15EA27623E4C07AC0389123751BF9B1345D877897E7B7DA5B8227A27E0E93D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger