Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 05:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_e709bec3e8a8883fba4a67a77c72d2b7_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target 2026-08-04_e709bec3e8a8883fba4a67a77c72d2b7_icedid_luca-stealer_njrat_stealc.exe
- Size 1.4MB
- Sample260804-fpwpqadd32
- SHA256 7aba7e50e1351f4a7d6391be7845782f88e0796f8b9f22d76d04f2dc13b64a2b
- MD5 e709bec3e8a8883fba4a67a77c72d2b7
- SHA1 db5821a3d05764d1538520e3ca57eb0556be5fa7
- SHA512 fb2cd3591fdd5f948ed86ecc4880d9b0598906f962d12dd97479c3b9567617a1e6c4710db4be567bf67134520171c2c56dc85627567aa05b05e30224736900f6
- SSDEEP 24576:9sy4XHhtCWQYZRlQB+5nqMx2WXcp+B9jcrg7:0yWQYam2vQ
- TLSH T173659E47B3B800ECD167C179C9165A07EBB2784513649BDB17D08AAA6F23FE11E7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 48 discord.com 87 discord.com 38 discord.com