General
- Target 2026-08-04_134ff0e4753e9438b923d69cfe2a26c8_icedid_luca-stealer_njrat_stealc
- Size 4.9MB
- Sample260804-t563aaveqd
- SHA256 706213e0a9e370a0fc3238401acf9247d2d87317fa4865677798f917a1f56ea9
- MD5 134ff0e4753e9438b923d69cfe2a26c8
- SHA1 8cb54032a06c2425ee8b89673f53a4c439f0420e
- SHA512 3f88d2b949c3d237b47e9969d9777222fd403a16487ec867e5c2589424757e7c41a3feea80e9fcba10cecdfd9a6f9ec908f26c2829651ba5f2ac32f4f616b700
- SSDEEP 98304:rIxD5KE94qWygsW7WFUr2w7cjNgOkXeqNInW0/VTxlzJ:rM591rW7SC2w7aNLWJNInWqTx3
- TLSH T1BB362386F3E411F9D0BB8138D786E60BFA763889076099DF23E059551FA36E05F7A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_134ff0e4753e9438b923d69cfe2a26c8_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_134ff0e4753e9438b923d69cfe2a26c8_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_134ff0e4753e9438b923d69cfe2a26c8_icedid_luca-stealer_njrat_stealc
- Size 4.9MB
- SHA256 706213e0a9e370a0fc3238401acf9247d2d87317fa4865677798f917a1f56ea9
- MD5 134ff0e4753e9438b923d69cfe2a26c8
- SHA1 8cb54032a06c2425ee8b89673f53a4c439f0420e
- SHA512 3f88d2b949c3d237b47e9969d9777222fd403a16487ec867e5c2589424757e7c41a3feea80e9fcba10cecdfd9a6f9ec908f26c2829651ba5f2ac32f4f616b700
- SSDEEP 98304:rIxD5KE94qWygsW7WFUr2w7cjNgOkXeqNInW0/VTxlzJ:rM591rW7SC2w7aNLWJNInWqTx3
- TLSH T1BB362386F3E411F9D0BB8138D786E60BFA763889076099DF23E059551FA36E05F7A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.