2026-08-05_b3832ef5dfe00ffe1a9229fda7bff617_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_b3832ef5dfe00ffe1a9229fda7bff617_icedid_luca-stealer_njrat_stealc
Size 3.3MB
Sample260805-v8wldssdkc
SHA256 c297e9e7e359127d034d912b81aa6f958eacec809a745c821e043017c82026e4
MD5 b3832ef5dfe00ffe1a9229fda7bff617
SHA1 0eb377519556e9b0139d2c6089bbdaa886ab3512
SHA512 fd89cf554ed225306ef2ad4f3e9e5c1950ec70dfeb02122e2ada75ae6d281f9511c91a62cced5fb8b5bc17f95967defe7bfd6fb1917a3cb16c399470ac132ca1
SSDEEP 49152:pMmWs1xQl28U8qnHNe9c81LgVvEKdvQ9NaZoZt:CmXnHNe991LgtEzks
TLSH
T1FFF561CD629D906BC99411BC95A5B753D89E3906403D4FC23DD0AEFF3C4AEFAE02461A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_b3832ef5dfe00ffe1a9229fda7bff617_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-05_b3832ef5dfe00ffe1a9229fda7bff617_icedid_luca-stealer_njrat_stealc

.exe 3.3MB

2026-08-05_b3832ef5dfe00ffe1a9229fda7bff617_icedid_luca-stealer_njrat_stealc

IMPHASH 2d110622dfc71b892fc0d9007d27c4ec
SHA256 c297e9e7e359127d034d912b81aa6f958eacec809a745c821e043017c82026e4
MD5 b3832ef5dfe00ffe1a9229fda7bff617
SHA1 0eb377519556e9b0139d2c6089bbdaa886ab3512
SHA512 fd89cf554ed225306ef2ad4f3e9e5c1950ec70dfeb02122e2ada75ae6d281f9511c91a62cced5fb8b5bc17f95967defe7bfd6fb1917a3cb16c399470ac132ca1
SSDEEP 49152:pMmWs1xQl28U8qnHNe9c81LgVvEKdvQ9NaZoZt:CmXnHNe991LgtEzks
TLSH
T1FFF561CD629D906BC99411BC95A5B753D89E3906403D4FC23DD0AEFF3C4AEFAE02461A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

139996

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryExA GetEnvironmentVariableA FindClose CloseHandle GetLastError QueryPerformanceCounter HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentProcess GetCurrentProcessId SwitchToThread GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree VirtualProtect CreateFileW SetLastError GetModuleFileNameW GetModuleHandleW LoadLibraryExW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetSystemTimeAsFileTime InitializeSListHead SetEndOfFile RtlPcToFileHeader RaiseException RtlUnwindEx EncodePointer InitializeCriticalSectionAndSpinCount ExitProcess GetModuleHandleExW SetStdHandle GetFileType ReadFile GetStdHandle WriteFile GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx CompareStringW LCMapStringW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW SetFilePointerEx GetFileSizeEx FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetStringTypeW HeapSize WriteConsoleW

Name

.text

Size

260KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nv_fatb

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nvFatBi

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

__nv_man

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_b3832ef5dfe00ffe1a9229fda7bff617_icedid_luca-stealer_njrat_stealc

kernel32

generic