General
- Target 2026-08-05_4b4c7a0743169156fc869595ff747bf3_icedid_luca-stealer_njrat
- Size 3.0MB
- Sample260805-dm3ddaak81
- SHA256 70bcf33effb758ae09b6fa65be9d30e1f7b463dd2df80c552e2ec807f3dae521
- MD5 4b4c7a0743169156fc869595ff747bf3
- SHA1 a73c59f2a6e4897ac6422b8d38c4b2297bd422ae
- SHA512 963ca1083d68bf2232908bc8bbbe3622bd94c43aed932727ce02a3983c006a9f4c9b7fbbb814e0ecddb8d6f1d478a067cfaa99ec78cc2c46d1275a137cb45169
- SSDEEP 49152:oyiOjvhLwZ1j9c36eStfvFQ1i2bWWjCgxdJDYpMB2zz4btR1XXro/5O+:UOJwZ1j986FnFQ1gPg/apMTBR5k5N
- TLSH T1D4E52245F7E000FAD0B792368921891BE672FC590760D6CB03F996A62F277E05D3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_4b4c7a0743169156fc869595ff747bf3_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_4b4c7a0743169156fc869595ff747bf3_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_4b4c7a0743169156fc869595ff747bf3_icedid_luca-stealer_njrat
- Size 3.0MB
- SHA256 70bcf33effb758ae09b6fa65be9d30e1f7b463dd2df80c552e2ec807f3dae521
- MD5 4b4c7a0743169156fc869595ff747bf3
- SHA1 a73c59f2a6e4897ac6422b8d38c4b2297bd422ae
- SHA512 963ca1083d68bf2232908bc8bbbe3622bd94c43aed932727ce02a3983c006a9f4c9b7fbbb814e0ecddb8d6f1d478a067cfaa99ec78cc2c46d1275a137cb45169
- SSDEEP 49152:oyiOjvhLwZ1j9c36eStfvFQ1i2bWWjCgxdJDYpMB2zz4btR1XXro/5O+:UOJwZ1j986FnFQ1gPg/apMTBR5k5N
- TLSH T1D4E52245F7E000FAD0B792368921891BE672FC590760D6CB03F996A62F277E05D3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Suspicious use of SetThreadContext