2026-07-11_65aea8896496b972a0ba25445c680358_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_65aea8896496b972a0ba25445c680358_icedid_luca-stealer_njrat_stealc
Size 1.9MB
Sample260711-e6l16sdy8w
SHA256 d60e97e64043c9d1ab8eebae3dcff12845403cc9c6e77998a25f27c119561a7a
MD5 65aea8896496b972a0ba25445c680358
SHA1 b5cec7b777eb5e7c062ab45f4e4f2dc71a0cb205
SHA512 f9eceb8ca031ab49e13d393c88f60450d173f4f7edfea11468a0297f6494d751cf35e8cb59f9c1f28ecdb352c96a85472ad78f9a50760ceeadd29fa0cb9f00e8
SSDEEP 49152:azuC4uPOFFpNPTDmt/LmAf3S+G8UyDZne:LqBE+
TLSH
T16B959E1A72A402FCD0BAD178CE479907EB71344907B156FF17E006961FAB6F48E7AB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_65aea8896496b972a0ba25445c680358_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-11_65aea8896496b972a0ba25445c680358_icedid_luca-stealer_njrat_stealc

.exe 1.9MB

2026-07-11_65aea8896496b972a0ba25445c680358_icedid_luca-stealer_njrat_stealc

IMPHASH ae5a1fdb20145e7afc1fd3e8068a0ea4
SHA256 d60e97e64043c9d1ab8eebae3dcff12845403cc9c6e77998a25f27c119561a7a
MD5 65aea8896496b972a0ba25445c680358
SHA1 b5cec7b777eb5e7c062ab45f4e4f2dc71a0cb205
SHA512 f9eceb8ca031ab49e13d393c88f60450d173f4f7edfea11468a0297f6494d751cf35e8cb59f9c1f28ecdb352c96a85472ad78f9a50760ceeadd29fa0cb9f00e8
SSDEEP 49152:azuC4uPOFFpNPTDmt/LmAf3S+G8UyDZne:LqBE+
TLSH
T16B959E1A72A402FCD0BAD178CE479907EB71344907B156FF17E006961FAB6F48E7AB12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1255452

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDevice

dcomp

DCompositionCreateDevice

d3dcompiler_47

D3DCompile

winhttp

WinHttpCloseHandle WinHttpQueryDataAvailable WinHttpSetTimeouts WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpReadData WinHttpQueryHeaders

shell32

SHCreateItemFromParsingName SHGetKnownFolderPath ShellExecuteW

ole32

CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize

kernel32

GetACP IsValidCodePage SetStdHandle GetTimeZoneInformation ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc SetFilePointerEx GetFileSizeEx CloseHandle GetLastError Sleep GetCurrentProcessId CreateProcessW GetModuleFileNameW GetModuleHandleW GetProcAddress MoveFileExW GetEnvironmentStringsW FreeEnvironmentStringsW WaitForSingleObject TerminateProcess GetExitCodeProcess MultiByteToWideChar GetStdHandle ReadFile SetHandleInformation CreatePipe PeekNamedPipe GetLocalTime GetVersionExW WideCharToMultiByte OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetOEMCP GetLocaleInfoA IsDBCSLeadByte SetUnhandledExceptionFilter CreateDirectoryW IsDebuggerPresent RaiseException SetConsoleTextAttribute HeapReAlloc HeapFree HeapAlloc WriteFile GetFileType ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx InitializeSListHead GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer GetCommandLineA GetCommandLineW SetEnvironmentVariableW GetProcessHeap GetSystemTimeAsFileTime HeapSize WriteConsoleW SetEndOfFile LoadLibraryA LocalFree RtlPcToFileHeader RtlUnwind FormatMessageA GetLocaleInfoEx InitOnceBeginInitialize InitOnceComplete GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetTickCount64 GetCurrentDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW SetFileInformationByHandle AreFileApisANSI CopyFileW GetFileInformationByHandleEx GetStringTypeW FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection

user32

PostQuitMessage LoadCursorW ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetForegroundWindow IsWindowUnicode SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SystemParametersInfoW GetClientRect SetWindowRgn UpdateWindow ReleaseCapture SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW TranslateMessage DefWindowProcW PostMessageW SendMessageW PeekMessageW DispatchMessageW

gdi32

CreateRoundRectRgn

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmExtendFrameIntoClientArea

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

385KB

Virtual Size

384KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_65aea8896496b972a0ba25445c680358_icedid_luca-stealer_njrat_stealc

d3d11

dcomp

d3dcompiler_47

winhttp

shell32

ole32

kernel32

user32

gdi32

dwmapi

imm32

generic