General
- Target 2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc
- Size 4.8MB
- Sample260804-pdbd3sek2x
- SHA256 76e5d45cd7376ad77795b78b448a2d78add28faf25422ad739d33e55c37846ae
- MD5 460e030360c346f0fdfb3249dbe2af6f
- SHA1 90b1936e11ac125e79b2e75a43191b4972ea5acc
- SHA512 7d82ca0790ac721c8df543afe4dba43d5cfec3f27753eae9f05d53ff3440c0bbc1c449937318a1ff4a3ed6a5ee9050f62213e8e54e88df48c72aadbdb7290d2b
- SSDEEP 98304:IqFeNyUaVQkPK5kxpbAPAKmvCY4feRV9jOglBfhQB:Ifi1aam45ryB
- TLSH T14E362346F2B961F8D07BD178CB85AA1BFA76385507608ADF13D045981FB36E04BBB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc
- Size 4.8MB
- SHA256 76e5d45cd7376ad77795b78b448a2d78add28faf25422ad739d33e55c37846ae
- MD5 460e030360c346f0fdfb3249dbe2af6f
- SHA1 90b1936e11ac125e79b2e75a43191b4972ea5acc
- SHA512 7d82ca0790ac721c8df543afe4dba43d5cfec3f27753eae9f05d53ff3440c0bbc1c449937318a1ff4a3ed6a5ee9050f62213e8e54e88df48c72aadbdb7290d2b
- SSDEEP 98304:IqFeNyUaVQkPK5kxpbAPAKmvCY4feRV9jOglBfhQB:Ifi1aam45ryB
- TLSH T14E362346F2B961F8D07BD178CB85AA1BFA76385507608ADF13D045981FB36E04BBB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.