2026-08-05_05e631c388c557bb16b4cdba00f56d98_icedid_luca-stealer_njrat_poet-rat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_05e631c388c557bb16b4cdba00f56d98_icedid_luca-stealer_njrat_poet-rat_stealc
Size 4.6MB
Sample260805-x3bedadf48
SHA256 0ecda18d52e7694aa09f7e73d41f4c1d2be2ca36cab86f7d01a0bc344dd79ae5
MD5 05e631c388c557bb16b4cdba00f56d98
SHA1 a6506661bd2e657a18fdda71f538b4c9b46c3200
SHA512 214b377c52a6157cf9f74bb18ff13c4846506618ff142386b7ddae1514bb17e6ba953ed088f978bab7b4e51b2266f2cd5f6d4723da9a1c9d540720f1d5928a86
SSDEEP 49152:9gXXhY51MMHgj0VwJMrgf7WgqM+mi6+6vCSmNCtV4ri6SSSQtahq4WLhtNeeNlsi:2hci6SSSQtahq4W9tNeUu++afthIPm
TLSH
T12B2650CD668D912BC99426BC58A9B743C89D3906403D4FC63DD06EFF3D4AEE7E02425A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_05e631c388c557bb16b4cdba00f56d98_icedid_luca-stealer_njrat_poet-rat_stealc

File Explorer

2026-08-05_05e631c388c557bb16b4cdba00f56d98_icedid_luca-stealer_njrat_poet-rat_stealc

.exe 4.6MB

2026-08-05_05e631c388c557bb16b4cdba00f56d98_icedid_luca-stealer_njrat_poet-rat_stealc

IMPHASH 2d3309c042b811cd3cbdfe1a3d3d68f0
SHA256 0ecda18d52e7694aa09f7e73d41f4c1d2be2ca36cab86f7d01a0bc344dd79ae5
MD5 05e631c388c557bb16b4cdba00f56d98
SHA1 a6506661bd2e657a18fdda71f538b4c9b46c3200
SHA512 214b377c52a6157cf9f74bb18ff13c4846506618ff142386b7ddae1514bb17e6ba953ed088f978bab7b4e51b2266f2cd5f6d4723da9a1c9d540720f1d5928a86
SSDEEP 49152:9gXXhY51MMHgj0VwJMrgf7WgqM+mi6+6vCSmNCtV4ri6SSSQtahq4WLhtNeeNlsi:2hci6SSSQtahq4W9tNeUu++afthIPm
TLSH
T12B2650CD668D912BC99426BC58A9B743C89D3906403D4FC63DD06EFF3D4AEE7E02425A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

135676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryExA GetEnvironmentVariableA FindClose CloseHandle GetLastError QueryPerformanceCounter QueryPerformanceFrequency HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentProcess GetCurrentProcessId SwitchToThread GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree VirtualProtect CreateFileW SetLastError GetModuleFileNameW GetModuleHandleW LoadLibraryExW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetSystemTimeAsFileTime InitializeSListHead InitializeCriticalSectionEx SetEndOfFile RtlPcToFileHeader RaiseException RtlUnwindEx EncodePointer InitializeCriticalSectionAndSpinCount ExitProcess GetModuleHandleExW SetStdHandle GetFileType ReadFile GetStdHandle WriteFile GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW SetFilePointerEx GetFileSizeEx FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetStringTypeW HeapSize WriteConsoleW

Name

.text

Size

259KB

Virtual Size

259KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

127KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nv_fatb

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nvFatBi

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

__nv_man

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_05e631c388c557bb16b4cdba00f56d98_icedid_luca-stealer_njrat_poet-rat_stealc

kernel32

generic