General
- Target 2026-07-18_10b055312e4c014c9117362249ef238f_icedid_luca-stealer_njrat
- Size 1.5MB
- Sample260718-3xfd2aas9v
- SHA256 2e41002e1f6848748f6afe28caea7f6d46675acf3de9157f6f8faf43f2ae1f76
- MD5 10b055312e4c014c9117362249ef238f
- SHA1 36b4ba8d140156d4c440bdb9598ea4ef1df1f933
- SHA512 8dced7a1fa78e785cdfc9f840aaf44aaed6267405b4f819507498b62e1231445fd22d12fba2656cf077bf2c7776b962e29fd5d5e25f4e7134fb6ec7bac8749b9
- SSDEEP 24576:uk7btrFBbfqN7tCbbK31erCqaVYyGBY4ThCd9fmzv/+sGMwXXC0zrU/Nxyz66:u8Vjy40eOqaeetdgDWsAyOrU/S
- TLSH T18675021F57A500FDD0EBC2B4CD564A07D6B2F80A4B71A69F03E549961F237A09E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-18_10b055312e4c014c9117362249ef238f_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_10b055312e4c014c9117362249ef238f_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_10b055312e4c014c9117362249ef238f_icedid_luca-stealer_njrat
- Size 1.5MB
- SHA256 2e41002e1f6848748f6afe28caea7f6d46675acf3de9157f6f8faf43f2ae1f76
- MD5 10b055312e4c014c9117362249ef238f
- SHA1 36b4ba8d140156d4c440bdb9598ea4ef1df1f933
- SHA512 8dced7a1fa78e785cdfc9f840aaf44aaed6267405b4f819507498b62e1231445fd22d12fba2656cf077bf2c7776b962e29fd5d5e25f4e7134fb6ec7bac8749b9
- SSDEEP 24576:uk7btrFBbfqN7tCbbK31erCqaVYyGBY4ThCd9fmzv/+sGMwXXC0zrU/Nxyz66:u8Vjy40eOqaeetdgDWsAyOrU/S
- TLSH T18675021F57A500FDD0EBC2B4CD564A07D6B2F80A4B71A69F03E549961F237A09E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.