General
- Target 2026-07-23_fd37edc8fbed558a72bc75cc97bd1be3_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 1.0MB
- Sample260723-bcvvfaee57
- SHA256 4661a029d7527965cd96031b93ac39e8991839de4f00882598cc2124b71d5fd3
- MD5 fd37edc8fbed558a72bc75cc97bd1be3
- SHA1 de1b445bfe3dda79592f7387c737d14072ff3e79
- SHA512 0177dea03266a8d0a8cce70c001983f06eeef6a26be507a64613b950bef7c5ff62c195d580e8caddb301803d1a793127f327a06895f055a9705733cef8ce9f3f
- SSDEEP 12288:cFUNDaMgr0t6om4lw8s0VstmcZ7ltS3Q6dhNMHgh1stmcsgZ7jd:cFOaMgr0t9lls0q3ltSg63WTNdd
- TLSH T155357C11F7E04076E1B35A705DB9C616AA367C761F70D9CF33904A6A4E32AC1AE34B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-23_fd37edc8fbed558a72bc75cc97bd1be3_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-23_fd37edc8fbed558a72bc75cc97bd1be3_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-07-23_fd37edc8fbed558a72bc75cc97bd1be3_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 1.0MB
- SHA256 4661a029d7527965cd96031b93ac39e8991839de4f00882598cc2124b71d5fd3
- MD5 fd37edc8fbed558a72bc75cc97bd1be3
- SHA1 de1b445bfe3dda79592f7387c737d14072ff3e79
- SHA512 0177dea03266a8d0a8cce70c001983f06eeef6a26be507a64613b950bef7c5ff62c195d580e8caddb301803d1a793127f327a06895f055a9705733cef8ce9f3f
- SSDEEP 12288:cFUNDaMgr0t6om4lw8s0VstmcZ7ltS3Q6dhNMHgh1stmcsgZ7jd:cFOaMgr0t9lls0q3ltSg63WTNdd
- TLSH T155357C11F7E04076E1B35A705DB9C616AA367C761F70D9CF33904A6A4E32AC1AE34B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
3