General
- Target 2026-07-12_2bc2acc7e2f5ec4b26ecdb179f73c95e_akira_icedid_luca-stealer_njrat_stealc
- Size 1.4MB
- Sample260712-q6wfdsa14k
- SHA256 9038263937c33c356c7c4b8e8872ec9db1343e6fb95b7c0433c74c3f4df2eeec
- MD5 2bc2acc7e2f5ec4b26ecdb179f73c95e
- SHA1 1c864ccf0939a348c04b9a0f38b280343f5cf48f
- SHA512 d60a63aa700d83d4fc0a0aeefdb283009d45b9e5a861a5efb015986af9ab670365b2a8c1b0ab51c19a67768004c7464b55c009c9bb3d1e98a90bd8080bc8951a
- SSDEEP 24576:GhdYCD6jfHvaIKlPN/Ob1s9ZexxPapcoHwnpNn/AamQ6yh2ClVO:GhaCD6jfHvaIKlPN/Ob1s9ZexxPaW74h
- TLSH T1DA65C50E654545E7C25B847CA645F77299207C8D0F22F5AF06C03EA73EFE9AC1A29237
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_2bc2acc7e2f5ec4b26ecdb179f73c95e_akira_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
phorphiex
C2
-
http://178.16.54.109
Targets
-
- Target 2026-07-12_2bc2acc7e2f5ec4b26ecdb179f73c95e_akira_icedid_luca-stealer_njrat_stealc
- Size 1.4MB
- SHA256 9038263937c33c356c7c4b8e8872ec9db1343e6fb95b7c0433c74c3f4df2eeec
- MD5 2bc2acc7e2f5ec4b26ecdb179f73c95e
- SHA1 1c864ccf0939a348c04b9a0f38b280343f5cf48f
- SHA512 d60a63aa700d83d4fc0a0aeefdb283009d45b9e5a861a5efb015986af9ab670365b2a8c1b0ab51c19a67768004c7464b55c009c9bb3d1e98a90bd8080bc8951a
- SSDEEP 24576:GhdYCD6jfHvaIKlPN/Ob1s9ZexxPapcoHwnpNn/AamQ6yh2ClVO:GhaCD6jfHvaIKlPN/Ob1s9ZexxPaW74h
- TLSH T1DA65C50E654545E7C25B847CA645F77299207C8D0F22F5AF06C03EA73EFE9AC1A29237
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.