General
- Target 2026-08-03_1e98c82f8bd02d351150abfe4c0b3e17_elex_icedid_luca-stealer_njrat_qakbot_stealc
- Size 3.4MB
- Sample260804-dssq5afl3v
- SHA256 2b408f0733447e68397f4db49856db76f5b692b7ac591aa2b441dfc4d49c1797
- MD5 1e98c82f8bd02d351150abfe4c0b3e17
- SHA1 33e50493986a8fcfcc41be279cfc299004960dde
- SHA512 2facfde78204490b1d93815213c66a76fbef444d3cd4ef4807107207d77c25e23f0cf0476fab37d124ddd79a99ac6c78289622a63ca954e56dded3ab2cb70ebc
- SSDEEP 98304:JemayLuC6dtasXAQb84gi4zgcBvCHVaoj+3:JeLBXAQb8TNEcBvCHVaoj+
- TLSH T150F5BE16A26400A9D066CDB8C91A1937E7777C4527246BDF1790B6A63FB3BE0DF3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-03_1e98c82f8bd02d351150abfe4c0b3e17_elex_icedid_luca-stealer_njrat_qakbot_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_1e98c82f8bd02d351150abfe4c0b3e17_elex_icedid_luca-stealer_njrat_qakbot_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_1e98c82f8bd02d351150abfe4c0b3e17_elex_icedid_luca-stealer_njrat_qakbot_stealc
- Size 3.4MB
- SHA256 2b408f0733447e68397f4db49856db76f5b692b7ac591aa2b441dfc4d49c1797
- MD5 1e98c82f8bd02d351150abfe4c0b3e17
- SHA1 33e50493986a8fcfcc41be279cfc299004960dde
- SHA512 2facfde78204490b1d93815213c66a76fbef444d3cd4ef4807107207d77c25e23f0cf0476fab37d124ddd79a99ac6c78289622a63ca954e56dded3ab2cb70ebc
- SSDEEP 98304:JemayLuC6dtasXAQb84gi4zgcBvCHVaoj+3:JeLBXAQb8TNEcBvCHVaoj+
- TLSH T150F5BE16A26400A9D066CDB8C91A1937E7777C4527246BDF1790B6A63FB3BE0DF3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE