General
- Target 2026-07-09_8f8eba87766ca5c5450a97f4316ec966_icedid_luca-stealer_ngrbot_njrat_stealc
- Size 2.1MB
- Sample260709-a13phsb13s
- SHA256 f87b51e3212ea5951114cb77dbe3c0b07c75adb21ee061c93ba2b6e1463ba2f5
- MD5 8f8eba87766ca5c5450a97f4316ec966
- SHA1 1c62ab7a642e732f93e168f702bdec4c74cab47f
- SHA512 16841c48d0f0524b102ddfe0b67755063d9164074141d201c4e9c6bb04b7c3d3a3fb9d42215d9cd28b35fdf3dbf895af98ffe66673e620a131c79b070cc4aa6f
- SSDEEP 24576:6u0aDhT+1a6L/TDsZPAch1k3iuc+lS4cO+4/T21/jzpXRpDMOWVoSE:6u0BTvIZPAVdZo0T2Vxhxj
- TLSH T1EDA56E07A7E801ECE0F7C27DCE569903D77274090771A6DF069089AA5F73AE05EBA721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
9 signatures
Behavioral task
behavioral1
Sample
2026-07-09_8f8eba87766ca5c5450a97f4316ec966_icedid_luca-stealer_ngrbot_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_8f8eba87766ca5c5450a97f4316ec966_icedid_luca-stealer_ngrbot_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_8f8eba87766ca5c5450a97f4316ec966_icedid_luca-stealer_ngrbot_njrat_stealc
- Size 2.1MB
- SHA256 f87b51e3212ea5951114cb77dbe3c0b07c75adb21ee061c93ba2b6e1463ba2f5
- MD5 8f8eba87766ca5c5450a97f4316ec966
- SHA1 1c62ab7a642e732f93e168f702bdec4c74cab47f
- SHA512 16841c48d0f0524b102ddfe0b67755063d9164074141d201c4e9c6bb04b7c3d3a3fb9d42215d9cd28b35fdf3dbf895af98ffe66673e620a131c79b070cc4aa6f
- SSDEEP 24576:6u0aDhT+1a6L/TDsZPAch1k3iuc+lS4cO+4/T21/jzpXRpDMOWVoSE:6u0BTvIZPAVdZo0T2Vxhxj
- TLSH T1EDA56E07A7E801ECE0F7C27DCE569903D77274090771A6DF069089AA5F73AE05EBA721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.