2026-08-01_e2e0188ac3b16952d5bab44b58193d4d_icedid_luca-stealer_njrat_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_e2e0188ac3b16952d5bab44b58193d4d_icedid_luca-stealer_njrat_stealc_vidar
Size 1.7MB
Sample260802-ee2bsatfmb
SHA256 99ccb91d5b8d5e6ece94444a1df3353a7c38cf420a27a317f29adbbc3e76dfef
MD5 e2e0188ac3b16952d5bab44b58193d4d
SHA1 3d672abe37cbad0c1dc9739706ed27c7ef78098f
SHA512 bcad316e895ebff6d5001304242ed8edfeeab6d59f8c16c3d7a7d666fb33304f3c2931c4307b8de537e2290bc5643d7c2939a9b0949afe8b8c2632f75d3b6fac
SSDEEP 49152:n89aq41nnc3ZB3IvxVUNmUhmUqrUzz7Ql8Rs:8LUA3qiZ
TLSH
T1BC85AE26AB9401FDE0BBC1B9C9478842E772780A07719BDF17D456722F676E44E3E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_e2e0188ac3b16952d5bab44b58193d4d_icedid_luca-stealer_njrat_stealc_vidar

File Explorer

2026-08-01_e2e0188ac3b16952d5bab44b58193d4d_icedid_luca-stealer_njrat_stealc_vidar

.exe 1.7MB

2026-08-01_e2e0188ac3b16952d5bab44b58193d4d_icedid_luca-stealer_njrat_stealc_vidar

IMPHASH f12be9195da949caa8dda2b60370698e
SHA256 99ccb91d5b8d5e6ece94444a1df3353a7c38cf420a27a317f29adbbc3e76dfef
MD5 e2e0188ac3b16952d5bab44b58193d4d
SHA1 3d672abe37cbad0c1dc9739706ed27c7ef78098f
SHA512 bcad316e895ebff6d5001304242ed8edfeeab6d59f8c16c3d7a7d666fb33304f3c2931c4307b8de537e2290bc5643d7c2939a9b0949afe8b8c2632f75d3b6fac
SSDEEP 49152:n89aq41nnc3ZB3IvxVUNmUhmUqrUzz7Ql8Rs:8LUA3qiZ
TLSH
T1BC85AE26AB9401FDE0BBC1B9C9478842E772780A07719BDF17D456722F676E44E3E322
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

653636

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar UnmapViewOfFile CreateFileMappingW MapViewOfFile Sleep GetCurrentProcessId LoadLibraryW GetProcAddress GetModuleHandleA LoadLibraryA InitializeCriticalSectionEx DeleteCriticalSection GetModuleHandleW DecodePointer GetModuleFileNameW HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap GetTempPathW WaitNamedPipeW ReadFile WritePrivateProfileStringW GetCurrentProcess FindResourceW LoadResource SizeofResource LockResource LoadLibraryExW GetFileAttributesW FreeLibrary GetProcessTimes GetSystemTimeAsFileTime IsWow64Process SetLastError GetFileSizeEx ResumeThread WaitForSingleObject LocalFree CreateDirectoryW SetEndOfFile WriteConsoleW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WriteFile CreateFileW GetLastError GetPrivateProfileStringW CloseHandle GetCommandLineA GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW GetConsoleMode FormatMessageA GetLocaleInfoEx GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObjectEx GetExitCodeThread EnterCriticalSection LeaveCriticalSection EncodePointer CompareStringEx GetCPInfo LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RaiseException RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle GetFileType SetFilePointerEx FlushFileBuffers GetConsoleOutputCP RtlUnwind

user32

MessageBoxW SetProcessDPIAware MessageBoxA

advapi32

SetEntriesInAclW ConvertStringSidToSidW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

SHGetFolderPathW

ole32

CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocString VariantInit SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate

mscoree

CLRCreateInstance

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_e2e0188ac3b16952d5bab44b58193d4d_icedid_luca-stealer_njrat_stealc_vidar

kernel32

user32

advapi32

shell32

ole32

oleaut32

mscoree

version

winmm

generic