General
- Target 2026-07-22_4d79205fbabd8aa15784d15697c003cd_icedid_luca-stealer_njrat_stealc
- Size 1.1MB
- Sample260722-19r79ach44
- SHA256 4d26b55de481b60c5080376a1325287ee79e4e1c8a7e1d3d6a9cbbd69bf58744
- MD5 4d79205fbabd8aa15784d15697c003cd
- SHA1 0c926c9a1fbc11cafc8842e7f52623733e01b783
- SHA512 edff212dce6cd6ab5c24ff960dbc65b80b953243ba27111fcdbec2268d29348948284f184881f9c141761d3fb3ed7fcf3056633c721f5c757317cc8f4f3dad5a
- SSDEEP 12288:c/MUMERUyNnpxsWC7917FHCQNbqV8mNd4wedUJ7aOkcWIVmCuHAe1Md78oL953O6:B9W6O6FY3XaZ94EvMLc0qvGAblI
- TLSH T1AF35CF92B2E445E8E07BC47489719983D672B8420B20AECB4B905D9A5F277F41DFF783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
6 signatures
Behavioral task
behavioral1
Sample
2026-07-22_4d79205fbabd8aa15784d15697c003cd_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_4d79205fbabd8aa15784d15697c003cd_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_4d79205fbabd8aa15784d15697c003cd_icedid_luca-stealer_njrat_stealc
- Size 1.1MB
- SHA256 4d26b55de481b60c5080376a1325287ee79e4e1c8a7e1d3d6a9cbbd69bf58744
- MD5 4d79205fbabd8aa15784d15697c003cd
- SHA1 0c926c9a1fbc11cafc8842e7f52623733e01b783
- SHA512 edff212dce6cd6ab5c24ff960dbc65b80b953243ba27111fcdbec2268d29348948284f184881f9c141761d3fb3ed7fcf3056633c721f5c757317cc8f4f3dad5a
- SSDEEP 12288:c/MUMERUyNnpxsWC7917FHCQNbqV8mNd4wedUJ7aOkcWIVmCuHAe1Md78oL953O6:B9W6O6FY3XaZ94EvMLc0qvGAblI
- TLSH T1AF35CF92B2E445E8E07BC47489719983D672B8420B20AECB4B905D9A5F277F41DFF783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext