2026-07-14_772b51d1d2837aba244d18ccbb39195c_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_772b51d1d2837aba244d18ccbb39195c_icedid_luca-stealer_njrat_stealc
Size 3.5MB
Sample260714-d8f29sdw4l
SHA256 b9076acd01a86d1fced2d13fcc656456bc88daff54cd898134e0b9c81a95330b
MD5 772b51d1d2837aba244d18ccbb39195c
SHA1 113df72c97b58dcea87767ef6b7f25c18e1b0c7c
SHA512 84db7ca275d449382405187251605bec423225d7a04c985124d9aba0767997ca2897b2aadda25209c471c27bea8a8c529ba2b9b19b6c7fefe9ca764d7d30e793
SSDEEP 98304:OeXIaXg9vZH17zq08iEL+mY2CWnJ5lwEn:tYaXgFzL1ERft5J
TLSH
T1B9060143E76542ECC1679178C662831BFB3138011B2097DB66E41BA96F53AF05FBE3A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_772b51d1d2837aba244d18ccbb39195c_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-14_772b51d1d2837aba244d18ccbb39195c_icedid_luca-stealer_njrat_stealc

.exe 3.5MB

2026-07-14_772b51d1d2837aba244d18ccbb39195c_icedid_luca-stealer_njrat_stealc

IMPHASH 7285646351c1441739b401643bc22c25
SHA256 b9076acd01a86d1fced2d13fcc656456bc88daff54cd898134e0b9c81a95330b
MD5 772b51d1d2837aba244d18ccbb39195c
SHA1 113df72c97b58dcea87767ef6b7f25c18e1b0c7c
SHA512 84db7ca275d449382405187251605bec423225d7a04c985124d9aba0767997ca2897b2aadda25209c471c27bea8a8c529ba2b9b19b6c7fefe9ca764d7d30e793
SSDEEP 98304:OeXIaXg9vZH17zq08iEL+mY2CWnJ5lwEn:tYaXgFzL1ERft5J
TLSH
T1B9060143E76542ECC1679178C662831BFB3138011B2097DB66E41BA96F53AF05FBE3A4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

240988

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\1337\Desktop\d7Perm\build\release\d7MoonWalk.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

d3dcompiler_43

D3DCompile

winmm

timeBeginPeriod timeEndPeriod

kernel32

GetProcAddress FreeLibrary QueryPerformanceCounter ReadFile GetModuleFileNameA CreateFileA CloseHandle ExitProcess CreateMutexW GetLastError SetThreadPriority Sleep GetCurrentThread WritePrivateProfileStringA LoadLibraryW GetModuleHandleW GetPrivateProfileStringA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetConsoleOutputCP FlushFileBuffers QueryPerformanceFrequency VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx WriteFile GetStdHandle GetModuleFileNameW FreeLibraryAndExitThread ExitThread CreateThread GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer LoadLibraryA GetLocaleInfoA GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc MultiByteToWideChar GetCommandLineA GetCommandLineW GetEnvironmentStringsW SetLastError CreateFileW HeapSize WriteConsoleW LCMapStringW SetEndOfFile GetStringTypeW SetStdHandle RaiseException RtlPcToFileHeader RtlUnwindEx FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetFileSizeEx HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA TryAcquireSRWLockExclusive InitializeCriticalSectionEx

user32

GetClipboardData CloseClipboard OpenClipboard SetClipboardData SetCursorPos ReleaseCapture IsWindowUnicode GetCursorPos SetForegroundWindow DefWindowProcW GetWindowRect DestroyWindow SetWindowPos CreateWindowExW UnregisterClassW RegisterClassExW GetAsyncKeyState DispatchMessageW PeekMessageW TranslateMessage PostQuitMessage GetDesktopWindow UpdateWindow SendInput ShowWindow FindWindowW GetClientRect GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor EmptyClipboard

shell32

ShellExecuteA

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

dwmapi

DwmExtendFrameIntoClientArea

xinput1_3

ord5 ord2

Name

.text

Size

792KB

Virtual Size

792KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

341KB

Virtual Size

346KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_772b51d1d2837aba244d18ccbb39195c_icedid_luca-stealer_njrat_stealc

d3d11

d3dx11_43

d3dcompiler_43

winmm

kernel32

user32

shell32

imm32

dwmapi

xinput1_3

generic