General
- Target 2026-07-09_6e1975d38f8ff4346a11cb11a402c754_icedid_luca-stealer_njrat_stealc_vidar
- Size 5.3MB
- Sample260709-pymmvaaw7j
- SHA256 a1d191bee4293566961de0c2f7521e858f4b31863423b6f9b59eecc06a61da9d
- MD5 6e1975d38f8ff4346a11cb11a402c754
- SHA1 510438cba0d8c62e81f0e86b5b06ab7e6ace6df1
- SHA512 e5f19427dc2deb84241e210bc30d195d477f91a6abf0b9bc5a32eb36f3cc215f911be596333788543684c211c09430f7e3c718f86e7f5a620a05941dc29b004c
- SSDEEP 49152:vUKKU2CaIekbN6lXTi8cPu3LeUva1252Fxs8nU3TQptC:v1YljKMEZbkCo
- TLSH T1B246F85AD67641E5D4FAD1798A67722BFC713C9EC130A707A780AB135B36720EA3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_6e1975d38f8ff4346a11cb11a402c754_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_6e1975d38f8ff4346a11cb11a402c754_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_6e1975d38f8ff4346a11cb11a402c754_icedid_luca-stealer_njrat_stealc_vidar
- Size 5.3MB
- SHA256 a1d191bee4293566961de0c2f7521e858f4b31863423b6f9b59eecc06a61da9d
- MD5 6e1975d38f8ff4346a11cb11a402c754
- SHA1 510438cba0d8c62e81f0e86b5b06ab7e6ace6df1
- SHA512 e5f19427dc2deb84241e210bc30d195d477f91a6abf0b9bc5a32eb36f3cc215f911be596333788543684c211c09430f7e3c718f86e7f5a620a05941dc29b004c
- SSDEEP 49152:vUKKU2CaIekbN6lXTi8cPu3LeUva1252Fxs8nU3TQptC:v1YljKMEZbkCo
- TLSH T1B246F85AD67641E5D4FAD1798A67722BFC713C9EC130A707A780AB135B36720EA3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.