2026-08-01_3c39289265937b7d65b8b6e847549a62_icedid_luca-stealer_njrat_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-01_3c39289265937b7d65b8b6e847549a62_icedid_luca-stealer_njrat_stealc_vidar
Size 1.7MB
Sample260802-ewakdsch63
SHA256 5c5914ed5f64b2025bb9bae758fd34ebb05a4349d6f1535521d59073b9f3dd03
MD5 3c39289265937b7d65b8b6e847549a62
SHA1 a619c84e01fb6d58c0aa51402c80a5e6f6a43c39
SHA512 54e44406f09e77efd49806729dc92ff7c107dc4d899ca99457cb6e2bdc5058b2df17c28ba78f2087060dfd5bbf77bb0119f5106246bf723185f52f0e3a5dd8f3
SSDEEP 49152:n89aq41nnc3ZB3IvxVUNmUhmUqrUjz7Ql8Rs:8LUA3qWp
TLSH
T1A185AE26AB9401FDE0BBC1B9C9578842E772780A07709BDF17D456722F676E44E3E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_3c39289265937b7d65b8b6e847549a62_icedid_luca-stealer_njrat_stealc_vidar

File Explorer

2026-08-01_3c39289265937b7d65b8b6e847549a62_icedid_luca-stealer_njrat_stealc_vidar

.exe 1.7MB

2026-08-01_3c39289265937b7d65b8b6e847549a62_icedid_luca-stealer_njrat_stealc_vidar

IMPHASH f12be9195da949caa8dda2b60370698e
SHA256 5c5914ed5f64b2025bb9bae758fd34ebb05a4349d6f1535521d59073b9f3dd03
MD5 3c39289265937b7d65b8b6e847549a62
SHA1 a619c84e01fb6d58c0aa51402c80a5e6f6a43c39
SHA512 54e44406f09e77efd49806729dc92ff7c107dc4d899ca99457cb6e2bdc5058b2df17c28ba78f2087060dfd5bbf77bb0119f5106246bf723185f52f0e3a5dd8f3
SSDEEP 49152:n89aq41nnc3ZB3IvxVUNmUhmUqrUjz7Ql8Rs:8LUA3qWp
TLSH
T1A185AE26AB9401FDE0BBC1B9C9578842E772780A07709BDF17D456722F676E44E3E322
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

653636

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar UnmapViewOfFile CreateFileMappingW MapViewOfFile Sleep GetCurrentProcessId LoadLibraryW GetProcAddress GetModuleHandleA LoadLibraryA InitializeCriticalSectionEx DeleteCriticalSection GetModuleHandleW DecodePointer GetModuleFileNameW HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap GetTempPathW WaitNamedPipeW ReadFile WritePrivateProfileStringW GetCurrentProcess FindResourceW LoadResource SizeofResource LockResource LoadLibraryExW GetFileAttributesW FreeLibrary GetProcessTimes GetSystemTimeAsFileTime IsWow64Process SetLastError GetFileSizeEx ResumeThread WaitForSingleObject LocalFree CreateDirectoryW SetEndOfFile WriteConsoleW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WriteFile CreateFileW GetLastError GetPrivateProfileStringW CloseHandle GetCommandLineA GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW GetConsoleMode FormatMessageA GetLocaleInfoEx GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObjectEx GetExitCodeThread EnterCriticalSection LeaveCriticalSection EncodePointer CompareStringEx GetCPInfo LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RaiseException RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle GetFileType SetFilePointerEx FlushFileBuffers GetConsoleOutputCP RtlUnwind

user32

MessageBoxW SetProcessDPIAware MessageBoxA

advapi32

SetEntriesInAclW ConvertStringSidToSidW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

SHGetFolderPathW

ole32

CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocString VariantInit SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate

mscoree

CLRCreateInstance

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-01_3c39289265937b7d65b8b6e847549a62_icedid_luca-stealer_njrat_stealc_vidar

kernel32

user32

advapi32

shell32

ole32

oleaut32

mscoree

version

winmm

generic