General
- Target 2026-07-23_eb2df24d6b32203e76146a2729ea80ef_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 3.0MB
- Sample260723-bd7kmatwhx
- SHA256 1bf88d55beb29e89213e07effcc987508cee0ea16afcc2a1a97f47b42a496a87
- MD5 eb2df24d6b32203e76146a2729ea80ef
- SHA1 163829102ecc143622a14dec8e23e2892d80c415
- SHA512 b6505d84fcaf083a0fa90b545c868d4b179ade9df8999f03ea77a8b0cf1188d2c950f1fadb4dcbe779094ba0aa8dc73db1dce41f5ac13503a889b000d1fd1d4b
- SSDEEP 98304:2AdiYMDPbqnPiHfEM00lBwWaTN8ZOkB/Db8KO:ZdiY2N5POCBO
- TLSH T13AE58E63B3E48065E57F517059A5962EEA327C39077280DF6281AE292F336C25F3B713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_eb2df24d6b32203e76146a2729ea80ef_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_eb2df24d6b32203e76146a2729ea80ef_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_eb2df24d6b32203e76146a2729ea80ef_amadey_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 3.0MB
- SHA256 1bf88d55beb29e89213e07effcc987508cee0ea16afcc2a1a97f47b42a496a87
- MD5 eb2df24d6b32203e76146a2729ea80ef
- SHA1 163829102ecc143622a14dec8e23e2892d80c415
- SHA512 b6505d84fcaf083a0fa90b545c868d4b179ade9df8999f03ea77a8b0cf1188d2c950f1fadb4dcbe779094ba0aa8dc73db1dce41f5ac13503a889b000d1fd1d4b
- SSDEEP 98304:2AdiYMDPbqnPiHfEM00lBwWaTN8ZOkB/Db8KO:ZdiY2N5POCBO
- TLSH T13AE58E63B3E48065E57F517059A5962EEA327C39077280DF6281AE292F336C25F3B713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2