General
- Target 2026-08-04_0fff5ff83daef654ae78c79b2e1f3cdf_icedid_luca-stealer_njrat_stealc
- Size 1.2MB
- Sample260804-j9rhaaga93
- SHA256 e4f5339358ee8e07a566f2faf90ce2955e49a9631a07cd357702c2a24c197990
- MD5 0fff5ff83daef654ae78c79b2e1f3cdf
- SHA1 5032e0fcbedd7f33c0244dde035c1b5f3503015b
- SHA512 d8fba19988e9b0a8eb0aabda4611e172c12bbb8ebe8e3d9b9b0139fb779b55082ad8e9869b10fa69c8cf68f3863f1ba84d7c05094733523459f9d188281ffd3c
- SSDEEP 24576:kzERlTx6aG6wUsmb57GBiOl6a8JTth/RWZvR6wQQ92pN3x:kzEQr6wub5+Pl6bJTIZ5jdgpX
- TLSH T12F45AD4EEAB621E8D0BBC0358A529132F9713C894738A7DB53506A671F33BE45B3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_0fff5ff83daef654ae78c79b2e1f3cdf_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_0fff5ff83daef654ae78c79b2e1f3cdf_icedid_luca-stealer_njrat_stealc
- Size 1.2MB
- SHA256 e4f5339358ee8e07a566f2faf90ce2955e49a9631a07cd357702c2a24c197990
- MD5 0fff5ff83daef654ae78c79b2e1f3cdf
- SHA1 5032e0fcbedd7f33c0244dde035c1b5f3503015b
- SHA512 d8fba19988e9b0a8eb0aabda4611e172c12bbb8ebe8e3d9b9b0139fb779b55082ad8e9869b10fa69c8cf68f3863f1ba84d7c05094733523459f9d188281ffd3c
- SSDEEP 24576:kzERlTx6aG6wUsmb57GBiOl6a8JTth/RWZvR6wQQ92pN3x:kzEQr6wub5+Pl6bJTIZ5jdgpX
- TLSH T12F45AD4EEAB621E8D0BBC0358A529132F9713C894738A7DB53506A671F33BE45B3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1