847739824f4a1fea0106e20741c79f716b4355214c25c79d9028b43a67ab80b5

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 04:30

Target
2026-07-10_57d6c8a56db8f036eef032a306d1301c_icedid_luca-stealer_njrat.exe
Size 1.7MB
Sample260710-e4tm8scz9p
SHA256 847739824f4a1fea0106e20741c79f716b4355214c25c79d9028b43a67ab80b5
MD5 57d6c8a56db8f036eef032a306d1301c
SHA1 336c18cf123f17395b7a8df91514103563fa7fba
SHA512 4d42da5e70ef29a44e369b26975df86bfc9176631ea2e7615931d9fb3b505e4f51917591d1dac3e33da3435aba085128e82b3612994fec8ce7d3892d8340b7bd
SSDEEP 24576:SigkpJGUIx1o+BWvMoaMm6VWhh4dI//JUcUDj2jtuV9m0bgI1d906nAchRqZXbG+:SKJGUdHaMm5T4UhnKYcZnfAMoZrJ/
TLSH
T19985F143E36603F5E477817686529DB1E1757D2A83649A8B0394B2FBFF23942097F382
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1732	2026-07-10_57d6c8a56db8f036eef032a306d1301c_icedid_luca-stealer_njrat.exe
1732	2026-07-10_57d6c8a56db8f036eef032a306d1301c_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-10_57d6c8a56db8f036eef032a306d1301c_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_57d6c8a56db8f036eef032a306d1301c_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1732

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact