2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc
Size 10.3MB
Sample260802-rlahvsvcjf
SHA256 3e80165031e5371a42f6b2aafdf1da1cda413d3c5320cc3d0f235eb94ac1986e
MD5 725e41a8940bb6a1eef7cba4c5207e62
SHA1 6bfbb11e4b7b16f153197732f6b2a86184496a7e
SHA512 4823d1c8a0030e305781889272db0fac99e4fea1b8a24bc21689804a4378f4cf5876e065b910845fab0674a378f227dd1f8460021854f12741ec40d426c48c6c
SSDEEP 196608:BQAvSn/nOkF38DB4itoE51m7KoXn5hhhNdBeAvo71F4M6:uGkF3m6itrXdoXvjvCP4
TLSH
T1FDB61345E25606BCCF63D378845A527BF6B17DC903A49ADB27CA49316F13AF42A3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc

.exe 10.3MB

2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc

IMPHASH 3ea17f46bfd88dd558554b863ba79b1a
SHA256 3e80165031e5371a42f6b2aafdf1da1cda413d3c5320cc3d0f235eb94ac1986e
MD5 725e41a8940bb6a1eef7cba4c5207e62
SHA1 6bfbb11e4b7b16f153197732f6b2a86184496a7e
SHA512 4823d1c8a0030e305781889272db0fac99e4fea1b8a24bc21689804a4378f4cf5876e065b910845fab0674a378f227dd1f8460021854f12741ec40d426c48c6c
SSDEEP 196608:BQAvSn/nOkF38DB4itoE51m7KoXn5hhhNdBeAvo71F4M6:uGkF3m6itrXdoXvjvCP4
TLSH
T1FDB61345E25606BCCF63D378845A527BF6B17DC903A49ADB27CA49316F13AF42A3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

791240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

opengl32

glClear wglCreateContext glClearColor wglDeleteContext wglMakeCurrent glBindTexture glGenTextures glTexParameteri glDeleteTextures glTexImage2D glPixelStorei glGetError glViewport

kernel32

GetCurrentProcess WriteFile OutputDebugStringA VirtualAlloc TerminateProcess GetTempPathW GetEnvironmentVariableA GetVolumeInformationA WaitForSingleObject CreateFileW GetFileAttributesW GetSystemDirectoryW GetModuleHandleA OpenProcess CreateToolhelp32Snapshot GetExitCodeThread Sleep GetLastError Process32NextW CreateFileA LockResource DeleteFileW Process32FirstW CloseHandle LoadResource FindResourceW GetProcAddress VirtualAllocEx MoveFileExW GetFileSize ExitProcess WideCharToMultiByte CreateRemoteThread GetSystemTimeAsFileTime CreateDirectoryA VirtualFreeEx GetTickCount IsWow64Process GetComputerNameA FlushFileBuffers MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency QueryPerformanceCounter FreeLibrary GetModuleHandleW GetFileSizeEx HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile VirtualFree EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetConsoleMode GetConsoleOutputCP GetTimeZoneInformation GetFileType SetFilePointerEx GetStdHandle GetModuleFileNameW GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter WriteProcessMemory SizeofResource ReadFile CreateDirectoryW ReadConsoleW FindClose SetEndOfFile FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW WakeAllConditionVariable LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetStdHandle HeapSize WriteConsoleW CreateFileMappingA ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId SleepConditionVariableSRW InitializeCriticalSectionEx

user32

ReleaseDC GetKeyState GetMessageExtraInfo GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData DefWindowProcW DestroyWindow GetDC SetWindowPos SetWindowRgn CreateWindowExW ScreenToClient GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow GetAsyncKeyState DispatchMessageW PeekMessageW SetWindowDisplayAffinity MessageBoxA TranslateMessage PostQuitMessage UpdateWindow SetForegroundWindow

gdi32

SetPixelFormat ChoosePixelFormat SwapBuffers CreateRoundRectRgn

advapi32

LookupPrivilegeValueW GetUserNameA AdjustTokenPrivileges OpenProcessToken

shell32

SHGetFolderPathA ShellExecuteA

ole32

CoInitializeEx CoUninitialize CoCreateInstance

wininet

InternetReadFile InternetConnectA HttpSendRequestA InternetCloseHandle InternetOpenA HttpAddRequestHeadersA InternetSetOptionA HttpOpenRequestA HttpQueryInfoA InternetQueryOptionA

imm32

ImmReleaseContext ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow

Name

.text

Size

968KB

Virtual Size

967KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

128KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc

opengl32

kernel32

user32

gdi32

advapi32

shell32

ole32

wininet

imm32

generic