72b5488dc3d3fec0346ed94ba8341d7196b3bfcee3e189ccc61baacf19993499 | Triage™

Login
Reports

Overview

overview

Static

static

2026-07-27...at.exe

windows10-2004-x64

7

2026-07-27...at.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_cb96e43e54b957a33e225c2acfddad80_icedid_luca-stealer_njrat
Size 1.6MB
Sample260727-jsb19sytbs
SHA256 72b5488dc3d3fec0346ed94ba8341d7196b3bfcee3e189ccc61baacf19993499
MD5 cb96e43e54b957a33e225c2acfddad80
SHA1 00424c3f2d183c9cdf7cf827c8dd2551d18465ef
SHA512 f2d53f0566dbc4f9efbe70c660f4da5dcd71e5bba9c666ccd718e333ed0bb0252e6014954df99cf90254b720aa4e7f0485cefd03c76b52c9d667fa8d1ddb6d46
SSDEEP 49152:5Ea3dCGhhDnS1uFDG/ZBtDG1p2YcdyMgA:a0dCGhh2EpGhayY
TLSH
T14475025AA7A401FDE1F7C274CD524946D772BC0A4B71A69F03E00A960F775A09E3EB32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

credential_access discovery execution persistence privilege_escalation stealer

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

2026-07-27_cb96e43e54b957a33e225c2acfddad80_icedid_luca-stealer_njrat.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

credential_access discovery execution persistence privilege_escalation stealer

Behavioral task

behavioral2

Sample

2026-07-27_cb96e43e54b957a33e225c2acfddad80_icedid_luca-stealer_njrat.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

credential_access discovery execution persistence privilege_escalation stealer

Malware Config

Targets

- Target
  2026-07-27_cb96e43e54b957a33e225c2acfddad80_icedid_luca-stealer_njrat
- Size 1.6MB
- SHA256 72b5488dc3d3fec0346ed94ba8341d7196b3bfcee3e189ccc61baacf19993499
- MD5 cb96e43e54b957a33e225c2acfddad80
- SHA1 00424c3f2d183c9cdf7cf827c8dd2551d18465ef
- SHA512 f2d53f0566dbc4f9efbe70c660f4da5dcd71e5bba9c666ccd718e333ed0bb0252e6014954df99cf90254b720aa4e7f0485cefd03c76b52c9d667fa8d1ddb6d46
- SSDEEP 49152:5Ea3dCGhhDnS1uFDG/ZBtDG1p2YcdyMgA:a0dCGhh2EpGhayY
- TLSH
  T14475025AA7A401FDE1F7C274CD524946D772BC0A4B71A69F03E00A960F775A09E3EB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access discovery execution persistence privilege_escalation stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Network Configuration Discovery

Wi-Fi Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdiscoveryexecutionpersistenceprivilege_escalationstealer

behavioral2

credential_accessdiscoveryexecutionpersistenceprivilege_escalationstealer

© 2018-2026

Terms | Privacy