2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc
Size 4.8MB
Sample260804-pdbd3sek2x
SHA256 76e5d45cd7376ad77795b78b448a2d78add28faf25422ad739d33e55c37846ae
MD5 460e030360c346f0fdfb3249dbe2af6f
SHA1 90b1936e11ac125e79b2e75a43191b4972ea5acc
SHA512 7d82ca0790ac721c8df543afe4dba43d5cfec3f27753eae9f05d53ff3440c0bbc1c449937318a1ff4a3ed6a5ee9050f62213e8e54e88df48c72aadbdb7290d2b
SSDEEP 98304:IqFeNyUaVQkPK5kxpbAPAKmvCY4feRV9jOglBfhQB:Ifi1aam45ryB
TLSH
T14E362346F2B961F8D07BD178CB85AA1BFA76385507608ADF13D045981FB36E04BBB312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc

.exe 4.8MB

2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc

IMPHASH 1f0b7eea2c4f36bb3230adc1fc2e4747
SHA256 76e5d45cd7376ad77795b78b448a2d78add28faf25422ad739d33e55c37846ae
MD5 460e030360c346f0fdfb3249dbe2af6f
SHA1 90b1936e11ac125e79b2e75a43191b4972ea5acc
SHA512 7d82ca0790ac721c8df543afe4dba43d5cfec3f27753eae9f05d53ff3440c0bbc1c449937318a1ff4a3ed6a5ee9050f62213e8e54e88df48c72aadbdb7290d2b
SSDEEP 98304:IqFeNyUaVQkPK5kxpbAPAKmvCY4feRV9jOglBfhQB:Ifi1aam45ryB
TLSH
T14E362346F2B961F8D07BD178CB85AA1BFA76385507608ADF13D045981FB36E04BBB312
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

506060

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcrypt

BCryptCloseAlgorithmProvider BCryptSetProperty BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptEncrypt BCryptDecrypt BCryptDestroyKey BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptCreateHash

d3d11

D3D11CreateDeviceAndSwapChain

user32

DefWindowProcW PeekMessageA DispatchMessageA ReleaseCapture PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW DestroyWindow ShowWindow UpdateWindow LoadIconW OpenClipboard CloseClipboard SetClipboardData GetClipboardData EnumDisplayMonitors GetMonitorInfoA MonitorFromWindow LoadCursorA SetWindowLongPtrA SetWindowLongW SetWindowLongA GetWindowLongW WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetClientRect GetPropA SetPropA ReleaseDC GetDC SetForegroundWindow GetForegroundWindow IsWindowUnicode EmptyClipboard SetCapture GetCapture GetKeyState SetFocus BringWindowToTop IsIconic SetWindowPos SetLayeredWindowAttributes IsChild GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout TranslateMessage

gdi32

GetDeviceCaps

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetTimeouts WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders

kernel32

GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType HeapAlloc HeapFree GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError RtlUnwindEx RaiseException RtlPcToFileHeader InitializeSListHead GetCurrentProcessId GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW TerminateProcess SetStdHandle IsProcessorFeaturePresent GetStartupInfoW GetEnvironmentStringsW UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetEnvironmentVariableA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileW GetFileAttributesA GetFileSizeEx ReadFile WriteFile GetTempPathW CloseHandle GetLastError WaitForSingleObject Sleep CreateRemoteThread GetExitCodeThread OpenProcess GetLocalTime GetTickCount VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW GetEnvironmentVariableW GetFileAttributesW ExitProcess GetModuleFileNameW MoveFileExW SystemTimeToFileTime GetVolumeInformationA LocalFree OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetLocaleInfoA IsDBCSLeadByte GetStringTypeW HeapSize HeapReAlloc SetEndOfFile WriteConsoleW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetUnhandledExceptionFilter GetCurrentProcess LoadLibraryA GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeCriticalSectionEx GetSystemTimeAsFileTime

shell32

ShellExecuteW SHGetFolderPathW

advapi32

RegGetValueA

crypt32

CryptProtectData CryptUnprotectData

imm32

ImmSetCandidateWindow ImmGetContext ImmReleaseContext ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

Name

.text

Size

658KB

Virtual Size

657KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_460e030360c346f0fdfb3249dbe2af6f_icedid_luca-stealer_njrat_stealc

bcrypt

d3d11

user32

gdi32

winhttp

kernel32

shell32

advapi32

crypt32

imm32

d3dcompiler_47

generic