Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 04:46
General
- Target 2026-08-04_fc9e6f64622a65434e9bf0d048a619ee_icedid_luca-stealer_njrat.exe
- Size 3.0MB
- Sample260804-fd8vxadb73
- SHA256 c543cb88c866e85cc25193de4a5f27889c4b1deabeeaf2cf1f96baa905b61618
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-04_fc9e6f64622a65434e9bf0d048a619ee_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-04_fc9e6f64622a65434e9bf0d048a619ee_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Roaming\Microsoft\OneDrive\OneDriveUpdater.exeC:\Users\Admin\AppData\Roaming\Microsoft\OneDrive\OneDriveUpdater.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
OneDriveUpdater.exe
memory/2560-10-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-3-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-4-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-1-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-2-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-0-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-7-0x00000176246D0000-0x00000176246D1000-memory.dmp
memory/2560-8-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-6-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2560-5-0x00000176246A0000-0x00000176246D0000-memory.dmp
memory/2904-12-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-16-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-17-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-15-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-14-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-13-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-11-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-19-0x000001D723FD0000-0x000001D724000000-memory.dmp
memory/2904-20-0x000001D723FD0000-0x000001D724000000-memory.dmp