General
- Target 2026-07-26_a21cbd516d8aabcb1aef17afa2bcb15e_icedid_luca-stealer_njrat
- Size 1.4MB
- Sample260726-1ngvdssamd
- SHA256 f515e9e0e84c39b5e8ef4b831c597af693cbaaa8f2f10a4f4ddda71908d6c97d
- MD5 a21cbd516d8aabcb1aef17afa2bcb15e
- SHA1 9201e4f4c69222580508d6d41898ff942eb61d8f
- SHA512 68ef8a549a35dd0df54a5b33cad5cabad3b7faaf8f7c9847bc79a0e8293c5e00d7929ea6cdb973fe7c3bbbba77232d01a0f66f486844e845887f5d01484fa421
- SSDEEP 24576:RxwSRH7cHhpCRy9dcnc81rePXEdFrbJL+pSNF7SULRWbXu24Eyi/jWmr:RMpCRy9dcZ1reIbJapBULEdrhj
- TLSH T1E7659E4FA76800F9D0B7C6B5CE465507D7B2B8060231A79F17E18BE62F276615E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-26_a21cbd516d8aabcb1aef17afa2bcb15e_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_a21cbd516d8aabcb1aef17afa2bcb15e_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_a21cbd516d8aabcb1aef17afa2bcb15e_icedid_luca-stealer_njrat
- Size 1.4MB
- SHA256 f515e9e0e84c39b5e8ef4b831c597af693cbaaa8f2f10a4f4ddda71908d6c97d
- MD5 a21cbd516d8aabcb1aef17afa2bcb15e
- SHA1 9201e4f4c69222580508d6d41898ff942eb61d8f
- SHA512 68ef8a549a35dd0df54a5b33cad5cabad3b7faaf8f7c9847bc79a0e8293c5e00d7929ea6cdb973fe7c3bbbba77232d01a0f66f486844e845887f5d01484fa421
- SSDEEP 24576:RxwSRH7cHhpCRy9dcnc81rePXEdFrbJL+pSNF7SULRWbXu24Eyi/jWmr:RMpCRy9dcZ1reIbJapBULEdrhj
- TLSH T1E7659E4FA76800F9D0B7C6B5CE465507D7B2B8060231A79F17E18BE62F276615E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.