General
- Target 2026-07-18_03814a06d6612551d8fe86fea56b638a_icedid_luca-stealer_njrat
- Size 1.6MB
- Sample260718-n7kdeadz7s
- SHA256 ec7ea9fd989e18c45b493ab702bdc14d2a7fc241a2f5573550c82283f5ead2a3
- MD5 03814a06d6612551d8fe86fea56b638a
- SHA1 f12bbba04b7d12bd656b4c694d30d40047a22911
- SHA512 9a272a1a607f042f2c39f8c00a9f7bc056af7823705e2c656a300975e0ab3f8ea9ef2ea63462d7d417602fe1f71749f248df295e4965f08ea8035f7c31b8fdec
- SSDEEP 49152:wSVS13puCQCG2zw7JYicPlX/C9lo6EpsQT+4p:PG3kpCcdYicPlXSED
- TLSH T14D75F11ED76401F8D1F7C275CE414A07EB72BC068B70A69F03E559961F637A09A3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-18_03814a06d6612551d8fe86fea56b638a_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_03814a06d6612551d8fe86fea56b638a_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_03814a06d6612551d8fe86fea56b638a_icedid_luca-stealer_njrat
- Size 1.6MB
- SHA256 ec7ea9fd989e18c45b493ab702bdc14d2a7fc241a2f5573550c82283f5ead2a3
- MD5 03814a06d6612551d8fe86fea56b638a
- SHA1 f12bbba04b7d12bd656b4c694d30d40047a22911
- SHA512 9a272a1a607f042f2c39f8c00a9f7bc056af7823705e2c656a300975e0ab3f8ea9ef2ea63462d7d417602fe1f71749f248df295e4965f08ea8035f7c31b8fdec
- SSDEEP 49152:wSVS13puCQCG2zw7JYicPlX/C9lo6EpsQT+4p:PG3kpCcdYicPlXSED
- TLSH T14D75F11ED76401F8D1F7C275CE414A07EB72BC068B70A69F03E559961F637A09A3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: 751Stealer
751 Stealer is a Windows infostealer distributed as a .NET 8 single-file bundle that grabs browser data, files, and crypto wallets.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE