2026-08-04_837a0285fb1fac55167f725ffad3a1e4_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_837a0285fb1fac55167f725ffad3a1e4_icedid_luca-stealer_njrat_stealc
Size 1.7MB
Sample260804-skg2zstaqa
SHA256 48488b3f3391e55984d18a4e5f6d03b64cfc0dcb9b685c2661af418546156d22
MD5 837a0285fb1fac55167f725ffad3a1e4
SHA1 6cdce2b8c01b995a7b14509c28ff54fddc8c2a7b
SHA512 700ecfea1bfebfb8bde44725ac7af13e132b4046b7d2192249b5a1c2b4fc9f2a52266c8eab4dad8b1aa5aa819d195c3629035e197c7ecb85352d854e2c948460
SSDEEP 24576:mBP03afTOJkmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:mKafIb5+Pl6bJTIZ5jdgp
TLSH
T1EE85E111E7F501E9E1738238CEA78512FD727C491774AAEF03A485AA1F33AD44E39B16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_837a0285fb1fac55167f725ffad3a1e4_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-04_837a0285fb1fac55167f725ffad3a1e4_icedid_luca-stealer_njrat_stealc

.exe 1.7MB

2026-08-04_837a0285fb1fac55167f725ffad3a1e4_icedid_luca-stealer_njrat_stealc

IMPHASH e162cb79ca6f78d8900174c8a47bd6b2
SHA256 48488b3f3391e55984d18a4e5f6d03b64cfc0dcb9b685c2661af418546156d22
MD5 837a0285fb1fac55167f725ffad3a1e4
SHA1 6cdce2b8c01b995a7b14509c28ff54fddc8c2a7b
SHA512 700ecfea1bfebfb8bde44725ac7af13e132b4046b7d2192249b5a1c2b4fc9f2a52266c8eab4dad8b1aa5aa819d195c3629035e197c7ecb85352d854e2c948460
SSDEEP 24576:mBP03afTOJkmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:mKafIb5+Pl6bJTIZ5jdgp
TLSH
T1EE85E111E7F501E9E1738238CEA78512FD727C491774AAEF03A485AA1F33AD44E39B16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

135108

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\pl\output\vistammsc.exe.pdb

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW

kernel32

CompareStringOrdinal GetLogicalProcessorInformationEx GetActiveProcessorCount GetActiveProcessorGroupCount CreateProcessW GetStartupInfoW GetWindowsDirectoryW GetVersionExW OutputDebugStringW TerminateThread SetEvent CreateEventW DeleteCriticalSection DecodePointer InitializeCriticalSectionEx GetLastError GetUserDefaultUILanguage FreeLibrary LocalFree VerifyVersionInfoW VerSetConditionMask GetModuleFileNameW GetFileSize GetCurrentProcess GetCurrentProcessId SetLastError GetProcAddress DeleteFileW GlobalAlloc GlobalLock GlobalUnlock WriteFile ReadFile WideCharToMultiByte GetNumaHighestNodeNumber GetNumaNodeProcessorMask MulDiv LocalAlloc LocalLock LocalUnlock InitializeCriticalSectionAndSpinCount MultiByteToWideChar EnterCriticalSection LeaveCriticalSection Sleep FlushFileBuffers SetEndOfFile FindNextFileW IsDebuggerPresent RaiseException ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId GetStringTypeW LoadLibraryExW QueryPerformanceCounter EncodePointer GetCPInfo WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead RtlUnwindEx RtlPcToFileHeader TlsAlloc TlsGetValue GetExitCodeProcess TlsFree GetModuleHandleExW GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW SetFilePointerEx FindClose FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetConsoleOutputCP GetConsoleMode WriteConsoleW GetFileAttributesW CreateFileW GetSystemTimeAsFileTime WaitForSingleObject CloseHandle GetModuleHandleW ExitProcess LoadLibraryW FindResourceExW FindResourceW LoadResource LockResource SizeofResource GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy GetSystemInfo TlsSetValue

user32

SetForegroundWindow MoveWindow GetParent SetTimer KillTimer WinHelpW RedrawWindow GetAsyncKeyState GetWindow CreateDialogIndirectParamW PeekMessageW IsDialogMessageW TranslateMessage DispatchMessageW WaitMessage PostQuitMessage DestroyWindow LoadIconW DrawTextW GetSystemMetrics SystemParametersInfoW GetDialogBaseUnits GetSysColor EndPaint DrawIcon BeginPaint MessageBeep GetLastActivePopup GetActiveWindow SetRect SetFocus UpdateWindow SetWindowLongPtrW IsDlgButtonChecked EnableMenuItem CreateWindowExW EnumChildWindows IsWindowEnabled GetClassNameW GetWindowLongPtrW GetWindowRect GetClientRect SetWindowTextW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard SetWindowLongW GetWindowLongW SetWindowPos IsWindow GetWindowTextW FillRect MessageBoxW LoadStringW SendMessageW ShowWindow GetSystemMenu CheckDlgButton SetPropW DialogBoxParamW GetDlgItem DestroyIcon SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt PostMessageW EnableWindow EndDialog

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegCloseKey

uxtheme

SetWindowTheme GetThemeColor CloseThemeData OpenThemeData IsThemeActive

dwmapi

DwmSetWindowAttribute

comctl32

InitCommonControlsEx ord410 ord413

gdi32

SetTextColor SetBkColor GetTextExtentPoint32W DeleteObject CreateSolidBrush DeleteDC CreateDCW SetBkMode SelectObject CreateFontIndirectW

Name

.text

Size

228KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_837a0285fb1fac55167f725ffad3a1e4_icedid_luca-stealer_njrat_stealc

shell32

kernel32

user32

comdlg32

advapi32

uxtheme

dwmapi

comctl32

gdi32

generic