2026-08-04_66b7163781f4e3aed42ebb832c525fee_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_66b7163781f4e3aed42ebb832c525fee_icedid_luca-stealer_njrat_stealc
Size 1.7MB
Sample260804-symjmach87
SHA256 ac4be8c9e4780ee0ecc400aa8ac13fdbf0e40f515f38e30f4d41d55e14d83aa4
MD5 66b7163781f4e3aed42ebb832c525fee
SHA1 968d0ff667b4b9be1d865468ca28158f3cdce949
SHA512 4cd144377d43453732ba816cde6a4cb1773f02bb1ce03b71bf3a992803857ac3dfc781852e02be248c5dc702ba29dd817ccac8eb03c886c6bef2324d597348dd
SSDEEP 24576:lLdgMU71Nmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:cMEeb5+Pl6bJTIZ5jdgp
TLSH
T10585DF06A6A518E5F8F7813D85929537FA7E78414364DBFB02934E562E23AFC5C3AF00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_66b7163781f4e3aed42ebb832c525fee_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-04_66b7163781f4e3aed42ebb832c525fee_icedid_luca-stealer_njrat_stealc

.exe 1.7MB

2026-08-04_66b7163781f4e3aed42ebb832c525fee_icedid_luca-stealer_njrat_stealc

IMPHASH 20ad0f26a6add017076ef1ff738fc351
SHA256 ac4be8c9e4780ee0ecc400aa8ac13fdbf0e40f515f38e30f4d41d55e14d83aa4
MD5 66b7163781f4e3aed42ebb832c525fee
SHA1 968d0ff667b4b9be1d865468ca28158f3cdce949
SHA512 4cd144377d43453732ba816cde6a4cb1773f02bb1ce03b71bf3a992803857ac3dfc781852e02be248c5dc702ba29dd817ccac8eb03c886c6bef2324d597348dd
SSDEEP 24576:lLdgMU71Nmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:cMEeb5+Pl6bJTIZ5jdgp
TLSH
T10585DF06A6A518E5F8F7813D85929537FA7E78414364DBFB02934E562E23AFC5C3AF00
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97032

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\pl\output\ThreadRacer.exe.pdb

kernel32

LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetLastError InitializeCriticalSectionEx DeleteCriticalSection WriteConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW CloseHandle SetEvent WaitForSingleObject CreateEventW GetCurrentProcess CreateThread GetCurrentThread SetThreadPriority GlobalAlloc GlobalUnlock GlobalLock SetThreadAffinityMask GetProcAddress GetModuleHandleW FindResourceExW ExitProcess GetProcessHeap HeapSize HeapFree GetCommandLineA GetCPInfo HeapReAlloc HeapAlloc HeapDestroy GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetFilePointerEx LCMapStringW LoadLibraryExW VirtualProtect GetLogicalProcessorInformationEx GetActiveProcessorCount GetActiveProcessorGroupCount GetUserDefaultUILanguage GetFileAttributesW FreeLibrary LocalFree MultiByteToWideChar VerifyVersionInfoW VerSetConditionMask GetModuleFileNameW CreateFileW GetStartupInfoW GetCurrentProcessId SetLastError WriteFile WideCharToMultiByte GetVersionExW MulDiv LocalAlloc LocalLock LocalUnlock InitializeCriticalSectionAndSpinCount EnterCriticalSection LeaveCriticalSection IsDebuggerPresent OutputDebugStringW RaiseException ReleaseSRWLockExclusive AcquireSRWLockExclusive GetCurrentThreadId QueryPerformanceCounter GetSystemTimeAsFileTime WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead RtlPcToFileHeader RtlUnwindEx EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree

user32

SystemParametersInfoW LoadImageW LoadIconW LoadCursorW EnumChildWindows SetWindowLongPtrW GetWindowLongPtrW FillRect ClientToScreen GetClientRect SetPropW GetWindowRect LoadStringW PostMessageW IsWindow SetWindowTextW GetClassNameW IsWindowEnabled SetRect GetActiveWindow GetLastActivePopup MessageBeep DrawIcon GetDialogBaseUnits GetSystemMetrics DestroyIcon EnableMenuItem GetSystemMenu CheckDlgButton SetFocus SetForegroundWindow TrackMouseEvent WinHelpW RedrawWindow GetAsyncKeyState GetWindow CreateDialogIndirectParamW PeekMessageW IsDialogMessageW TranslateMessage DispatchMessageW WaitMessage PostQuitMessage GetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC DrawTextW EnableWindow KillTimer SetTimer EmptyClipboard SetClipboardData CloseClipboard OpenClipboard GetDlgCtrlID GetDlgItem EndDialog DialogBoxParamW SetWindowPlacement GetWindowPlacement SetWindowPos MoveWindow ShowWindow DestroyWindow CreateWindowExW RegisterClassExW DefWindowProcW SendMessageW GetSysColor GetParent MessageBoxW

gdi32

SetTextColor SetBkMode SelectObject LineTo GetTextExtentPoint32W DeleteObject DeleteDC CreateSolidBrush CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt MoveToEx SetBkColor CreateDCW

advapi32

RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey

ole32

CoInitialize

comctl32

InitCommonControlsEx ord17

uxtheme

SetWindowTheme

dwmapi

DwmSetWindowAttribute

Name

.text

Size

193KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_66b7163781f4e3aed42ebb832c525fee_icedid_luca-stealer_njrat_stealc

kernel32

user32

gdi32

advapi32

ole32

comctl32

uxtheme

dwmapi

generic