2026-08-07_c03ec502466907b31a9f5b7e50febf41_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_c03ec502466907b31a9f5b7e50febf41_icedid_luca-stealer_njrat_stealc
Size 3.5MB
Sample260807-3qya9sysb1
SHA256 7ba06baedbfdecd94ecb8abf2b93929cf4c0ad35de2d1e27e581ff3a1b0a6fbb
MD5 c03ec502466907b31a9f5b7e50febf41
SHA1 d4d9e62e442a01ecc645318b64daa6892ba93f80
SHA512 01de430c6b33004e130868b1546f8c74e940c642c73d29f5a11a98b7be02409692c26def9ae8f855ad2dd955de893fdb6ba65ce71c0949d300c6170f75cd4a4c
SSDEEP 49152:dr/Md9h/bLGrCtMm1En9t5BipJrzdAh2AZMUsrr2jxX7cEvi+foguj/WI/qxOMwS:1uZcroVF5IzKX+G
TLSH
T150063A5B26E4A115C5880578B26EBBE5C8DF2E13413B8FE21CC0C9EB5E959DDEC21339
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_c03ec502466907b31a9f5b7e50febf41_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-07_c03ec502466907b31a9f5b7e50febf41_icedid_luca-stealer_njrat_stealc

.exe 3.5MB

2026-08-07_c03ec502466907b31a9f5b7e50febf41_icedid_luca-stealer_njrat_stealc

IMPHASH 02512959385026fee662616d2f7548f5
SHA256 7ba06baedbfdecd94ecb8abf2b93929cf4c0ad35de2d1e27e581ff3a1b0a6fbb
MD5 c03ec502466907b31a9f5b7e50febf41
SHA1 d4d9e62e442a01ecc645318b64daa6892ba93f80
SHA512 01de430c6b33004e130868b1546f8c74e940c642c73d29f5a11a98b7be02409692c26def9ae8f855ad2dd955de893fdb6ba65ce71c0949d300c6170f75cd4a4c
SSDEEP 49152:dr/Md9h/bLGrCtMm1En9t5BipJrzdAh2AZMUsrr2jxX7cEvi+foguj/WI/qxOMwS:1uZcroVF5IzKX+G
TLSH
T150063A5B26E4A115C5880578B26EBBE5C8DF2E13413B8FE21CC0C9EB5E959DDEC21339
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryExA GetEnvironmentVariableA FindClose CloseHandle GetLastError QueryPerformanceCounter HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentProcess GetCurrentProcessId SwitchToThread GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree VirtualProtect CreateFileW SetLastError GetModuleFileNameW GetModuleHandleW LoadLibraryExW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetSystemTimeAsFileTime InitializeSListHead SetEndOfFile RtlPcToFileHeader RaiseException RtlUnwindEx InitializeCriticalSectionAndSpinCount EncodePointer ExitProcess GetModuleHandleExW SetStdHandle GetFileType ReadFile GetStdHandle WriteFile GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx CompareStringW LCMapStringW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW SetFilePointerEx GetFileSizeEx FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetStringTypeW HeapSize WriteConsoleW

Name

.text

Size

185KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

119KB

Virtual Size

118KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nv_fatb

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nvFatBi

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

__nv_man

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_c03ec502466907b31a9f5b7e50febf41_icedid_luca-stealer_njrat_stealc

kernel32

generic