General
- Target 2026-08-03_9392576a9f29875bc606a0ee591b48b1_icedid_luca-stealer_njrat_stealc
- Size 1.8MB
- Sample260804-mvgw3shg75
- SHA256 1dd4afa92089daa5cdb37f7aff34f0ffa91d98edc6f01a0161dd134143192f45
- MD5 9392576a9f29875bc606a0ee591b48b1
- SHA1 7712c547df206f8482d5ce7f168181729c38a9ab
- SHA512 c9cf67fd43bf7b9cf4c6cd75909b0e04fcd803e74bb84981e9202f3646b6d55c5d06898164175edd9f422fab1760670ffc361ff64706117ab0a37b82f5299cca
- SSDEEP 24576:Vax1vuyK+AaEQ+UacvH5I2VIII6qZIlhjpHP56ctP28kOw0z7+cYwaZCx5:AxN036qKTj5PcctPpkOX+93CL
- TLSH T194951832F2982698D176917CFE4A8C53EA21748913717FEB01911ED22F97EE09B7E341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_9392576a9f29875bc606a0ee591b48b1_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_9392576a9f29875bc606a0ee591b48b1_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_9392576a9f29875bc606a0ee591b48b1_icedid_luca-stealer_njrat_stealc
- Size 1.8MB
- SHA256 1dd4afa92089daa5cdb37f7aff34f0ffa91d98edc6f01a0161dd134143192f45
- MD5 9392576a9f29875bc606a0ee591b48b1
- SHA1 7712c547df206f8482d5ce7f168181729c38a9ab
- SHA512 c9cf67fd43bf7b9cf4c6cd75909b0e04fcd803e74bb84981e9202f3646b6d55c5d06898164175edd9f422fab1760670ffc361ff64706117ab0a37b82f5299cca
- SSDEEP 24576:Vax1vuyK+AaEQ+UacvH5I2VIII6qZIlhjpHP56ctP28kOw0z7+cYwaZCx5:AxN036qKTj5PcctPpkOX+93CL
- TLSH T194951832F2982698D176917CFE4A8C53EA21748913717FEB01911ED22F97EE09B7E341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.