2026-07-19_c85715a84fcc83247842f20a32ddcfe8_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_c85715a84fcc83247842f20a32ddcfe8_icedid_luca-stealer_njrat_stealc
Size 3.3MB
Sample260720-ax5dyacy21
SHA256 983450279f238c1edb8ee05f57146951bee95fb8fcc72d825109b3d9159f3413
MD5 c85715a84fcc83247842f20a32ddcfe8
SHA1 2c345195446f956cb566c325a7a172e5e059e267
SHA512 40f98a3417f8299401ac99d33063448fe615dd46da94fa8a8c8b40dda5076651801367b6b6793c5ec8600c28f72c82bd865f21ba777aa355c8c1948f7dee1135
SSDEEP 49152:sqdaEQHgyCHW3mY07W/FoP6jfDWS6tBVTDz7WYjEF95N5A3feU8:eEWB3I9P6jfDWSWBRfWYjEF95N52eU8
TLSH
T16CF59CE305EC0598D57E92308591877EDBF3BC6E43E389DB8293BC151B266DC4A72623
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_c85715a84fcc83247842f20a32ddcfe8_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-19_c85715a84fcc83247842f20a32ddcfe8_icedid_luca-stealer_njrat_stealc

.exe 3.3MB

2026-07-19_c85715a84fcc83247842f20a32ddcfe8_icedid_luca-stealer_njrat_stealc

IMPHASH 8cf60810d3c31b82a778c8ec5916368e
SHA256 983450279f238c1edb8ee05f57146951bee95fb8fcc72d825109b3d9159f3413
MD5 c85715a84fcc83247842f20a32ddcfe8
SHA1 2c345195446f956cb566c325a7a172e5e059e267
SHA512 40f98a3417f8299401ac99d33063448fe615dd46da94fa8a8c8b40dda5076651801367b6b6793c5ec8600c28f72c82bd865f21ba777aa355c8c1948f7dee1135
SSDEEP 49152:sqdaEQHgyCHW3mY07W/FoP6jfDWS6tBVTDz7WYjEF95N5A3feU8:eEWB3I9P6jfDWSWBRfWYjEF95N52eU8
TLSH
T16CF59CE305EC0598D57E92308591877EDBF3BC6E43E389DB8293BC151B266DC4A72623
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

602336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

C:\__w\1\s\x64\Release\Autoruns64.pdb

kernel32

ReadConsoleInputW SetConsoleMode GetConsoleMode GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetConsoleCP ExitProcess VirtualProtect GetSystemInfo TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlPcToFileHeader RtlUnwindEx IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WakeAllConditionVariable GetCPInfo GetSystemTimeAsFileTime FlushFileBuffers QueryPerformanceCounter LCMapStringEx InitOnceBeginInitialize InitOnceComplete SleepConditionVariableSRW TryAcquireSRWLockExclusive AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive GetStringTypeW LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer OutputDebugStringW IsDebuggerPresent FindPackagesByPackageFamily GetNativeSystemInfo IsWow64Process GetFileTime QueryDosDeviceW GetLogicalDrives SearchPathW K32GetMappedFileNameW UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize FileTimeToLocalFileTime CreateThreadpoolTimer CloseThreadpoolTimer SetThreadpoolTimer TrySubmitThreadpoolCallback WaitForMultipleObjects CreateSemaphoreW CreateEventW SetEnvironmentVariableW FindClose FindNextFileW FindFirstFileW ReleaseSemaphore SetEvent GetWindowsDirectoryW GetSystemWow64DirectoryW GetSystemWindowsDirectoryW GetConsoleOutputCP GetFileSizeEx SetFilePointerEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle WriteConsoleW GetFileType LocalAlloc GetStdHandle GetVersionExW GetTickCount64 WaitForSingleObject GetSystemDirectoryW CreateThread TerminateThread Sleep OpenProcess ExpandEnvironmentStringsW CreateProcessW GetStartupInfoW GetCommandLineW GetCurrentProcessId VerSetConditionMask VerifyVersionInfoW VirtualQuery GetFullPathNameW GetComputerNameW LocalFree lstrcmpW SetFileAttributesW CreateDirectoryW RemoveDirectoryW MoveFileW GetTimeFormatW GetDateFormatW GetNumberFormatEx GetLocaleInfoW Wow64RevertWow64FsRedirection GetFileInformationByHandle Wow64DisableWow64FsRedirection FileTimeToSystemTime GlobalAlloc SystemTimeToTzSpecificLocalTime GetCurrentThread SetThreadPriority DecodePointer SetCurrentDirectoryW LoadLibraryExW MultiByteToWideChar lstrcmpiW WideCharToMultiByte GetModuleHandleExW lstrlenW DeleteFileW CloseHandle WriteFile CreateFileW GetTempFileNameW GetTempPathW GetThreadId FreeLibrary LoadLibraryW MulDiv GetModuleFileNameW RaiseException GetCurrentThreadId SetLastError LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionEx GetLastError DeleteCriticalSection GetPrivateProfileIntW GetPrivateProfileStringW GetFileAttributesW GetCurrentProcess GetModuleHandleW GetProcAddress FindResourceExW FindResourceW LoadResource LockResource SizeofResource GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy GlobalUnlock GlobalLock

user32

OpenClipboard EmptyClipboard DialogBoxIndirectParamW IsRectEmpty FindWindowExW SetForegroundWindow WaitForInputIdle FindWindowW EnumDisplaySettingsW IsDlgButtonChecked CheckDlgButton GetDlgItemTextW EnableWindow CreatePopupMenu RemoveMenu AdjustWindowRectEx SetRect SetRectEmpty SetCursorPos MessageBeep SetClipboardData CloseClipboard SendMessageW GetSysColor DrawIconEx SetMenuItemInfoW DestroyMenu LoadImageW SetWindowTextW GetWindowTextW GetWindowTextLengthW InvalidateRect KillTimer GetWindowLongPtrW GetParent SetTimer SetFocus GetFocus BeginPaint EndPaint GetClientRect DrawTextW SetWindowLongPtrW DefWindowProcW UnregisterClassW RegisterClassExW CharLowerW GetWindowThreadProcessId GetMessagePos WindowFromPoint GetDesktopWindow GetCursorPos InsertMenuW TranslateAcceleratorW IsMenu RegisterWindowMessageW SetCapture ClientToScreen TrackMouseEvent GetCapture GetDlgCtrlID ReleaseCapture GetKeyState CreateDialogParamW PostQuitMessage LoadStringA DialogBoxParamW SetWindowPlacement SetCursor MessageBoxW GetActiveWindow GetWindowPlacement SetMenu GetMenu IsDialogMessageW EnableMenuItem CheckMenuRadioItem SetMenuDefaultItem AppendMenuW GetMenuItemID DeleteMenu DrawEdge GetClassInfoExW SetMenuInfo GetMenuInfo GetSubMenu ModifyMenuW GetMenuItemInfoW GetMenuItemCount MonitorFromPoint TrackPopupMenuEx EnumChildWindows LoadAcceleratorsW LoadMenuW LoadStringW DestroyWindow GetMessageW TranslateMessage DispatchMessageW CharNextW IsWindow PeekMessageW LoadIconW GetDlgItem EndDialog SetDlgItemTextW GetWindow GetWindowRect MapWindowPoints SetScrollInfo UnhookWindowsHookEx GetAncestor GetWindowModuleFileNameW IsChild CallNextHookEx SetWindowsHookExW GetClassNameW SetClassLongPtrW SystemParametersInfoW DestroyIcon IsZoomed ScreenToClient GetMonitorInfoW MonitorFromWindow GetWindowDC RedrawWindow PtInRect PostMessageW ShowScrollBar IsWindowVisible UpdateWindow ReleaseDC GetDC OffsetRect FillRect GetWindowLongW SetWindowLongW SetWindowPos GetSystemMetrics MoveWindow SetScrollPos ShowWindow GetScrollInfo DrawFocusRect IsWindowEnabled FrameRect CopyRect InflateRect GetSysColorBrush CallWindowProcW CreateWindowExW LoadCursorW DrawFrameControl

gdi32

SetViewportOrgEx SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteObject DeleteDC BitBlt SetBkColor ExtTextOutW SetTextColor SetBkMode GetObjectW CreateFontIndirectW CreateSolidBrush GetStockObject GetDeviceCaps CreatePen MoveToEx LineTo GetTextExtentPoint32W Rectangle SetTextAlign Polyline CreatePatternBrush SetBrushOrgEx PatBlt CreateDIBSection ExcludeClipRect Polygon GetCurrentObject EndPage StartDocW SetMapMode EndDoc StartPage TextOutW CreateBitmap

comdlg32

GetSaveFileNameW PrintDlgW FindTextW GetOpenFileNameW ChooseFontW

advapi32

RegOpenKeyExW AdjustTokenPrivileges LookupPrivilegeValueW RegLoadMUIStringW CryptGetHashParam RegCreateKeyW RegOpenKeyW RegRenameKey RegEnumValueW CloseServiceHandle DeleteService ControlService QueryServiceStatus OpenServiceW OpenSCManagerW ConvertStringSidToSidW LookupAccountSidW RegDeleteTreeW RegCopyTreeW RegQueryValueExW RegLoadKeyW OpenProcessToken GetTokenInformation IsValidSid GetLengthSid ConvertSidToStringSidW CopySid RegDeleteValueW RegCreateKeyExW RegSetValueExW QueryServiceConfig2W RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW CryptHashData CryptCreateHash CryptAcquireContextW CryptReleaseContext GetServiceDisplayNameW CryptDestroyHash

shell32

ShellExecuteExW CommandLineToArgvW SHGetKnownFolderPath SHGetStockIconInfo ExtractIconExW SHEvaluateSystemCommandTemplate ShellExecuteW ExtractAssociatedIconW

ole32

CoCreateInstance CoUninitialize CLSIDFromString CoTaskMemFree CoTaskMemAlloc CoInitializeEx StgCreateStorageEx StgOpenStorageEx StringFromGUID2 CoTaskMemRealloc

oleaut32

SysStringLen SysAllocString VariantInit SysFreeString VarUI4FromStr VariantClear

shlwapi

SHCreateStreamOnFileW SHAutoComplete ord487

comctl32

ImageList_GetImageCount ImageList_BeginDrag ImageList_Create ImageList_Draw ImageList_Duplicate ImageList_AddMasked CreateStatusWindowW ImageList_EndDrag ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_DragEnter ImageList_Read ImageList_WriteEx InitCommonControlsEx ImageList_GetIcon ImageList_ReplaceIcon ImageList_DrawIndirect ord344 ImageList_GetIconSize ImageList_DrawEx ImageList_Destroy

uxtheme

IsAppThemed IsThemeActive SetWindowTheme

msimg32

GradientFill

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

dwmapi

DwmDefWindowProc DwmSetWindowAttribute

winhttp

WinHttpConnect WinHttpOpen WinHttpWriteData WinHttpReceiveResponse WinHttpSendRequest WinHttpCloseHandle WinHttpGetProxyForUrl WinHttpSetOption WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpOpenRequest WinHttpReadData

crypt32

CertGetNameStringW

Name

.text

Size

790KB

Virtual Size

789KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

272KB

Virtual Size

272KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

36KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.detour

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_c85715a84fcc83247842f20a32ddcfe8_icedid_luca-stealer_njrat_stealc

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

uxtheme

msimg32

version

dwmapi

winhttp

crypt32

generic