General
- Target 2026-07-18_7b221af327e3817be15d4fcf5188c8a8_icedid_luca-stealer_njrat_stealc
- Size 8.5MB
- Sample260718-bbpl2aa18p
- SHA256 f0815435f264238b326eed28b26f269e865e576f63c20b7546642a4b93ee6515
- MD5 7b221af327e3817be15d4fcf5188c8a8
- SHA1 8f81c8caa8f15f4ce9eb6b2666dd6aea77a552ae
- SHA512 83855dc6ead8c39b3a1fef7e23fdf12c6066f43f066ca56b2b1144ffb95560c404e5617bcf6a65b3c909a1bc439119ddc93d9febef3b55975912778807a18117
- SSDEEP 196608:MaD5aI0urs7WwlVeUrf2MPc2L+PKskCS8feSCmPx:A7/Lr5Pc8+PK9Z8ff
- TLSH T10F96F15969E211BCD4B3C43AC3AB46EBE716704A1FB6486F7BC404501633CD9DEA3B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_7b221af327e3817be15d4fcf5188c8a8_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_7b221af327e3817be15d4fcf5188c8a8_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_7b221af327e3817be15d4fcf5188c8a8_icedid_luca-stealer_njrat_stealc
- Size 8.5MB
- SHA256 f0815435f264238b326eed28b26f269e865e576f63c20b7546642a4b93ee6515
- MD5 7b221af327e3817be15d4fcf5188c8a8
- SHA1 8f81c8caa8f15f4ce9eb6b2666dd6aea77a552ae
- SHA512 83855dc6ead8c39b3a1fef7e23fdf12c6066f43f066ca56b2b1144ffb95560c404e5617bcf6a65b3c909a1bc439119ddc93d9febef3b55975912778807a18117
- SSDEEP 196608:MaD5aI0urs7WwlVeUrf2MPc2L+PKskCS8feSCmPx:A7/Lr5Pc8+PK9Z8ff
- TLSH T10F96F15969E211BCD4B3C43AC3AB46EBE716704A1FB6486F7BC404501633CD9DEA3B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger