General
- Target 2026-08-07_6ecf658f7f63cc043d9adc63a4a242b6_icedid_luca-stealer_njrat
- Size 1.4MB
- Sample260807-re2nrsxarg
- SHA256 139250c35ee5e777de25170e3e8a4e98f20acd0c7c95662f4a6ad7cc4b62ac98
- MD5 6ecf658f7f63cc043d9adc63a4a242b6
- SHA1 8d6f0c034ea634b5237960cbecc82d1062668eb3
- SHA512 0d8188d477e2c31b810f65b49aecaab82ac9bcd62a4a41dcbb7cdf3ca9be566ae617368dc35dfd2d57a28e590165fdc02af80d1afac389d2088bc201011d0919
- SSDEEP 12288:eHDmD+0wJ1BwM+rcY4lEL6b3evjDLL8hA1QKsP5umrES7ltmP5FS:eHDfaM+rNQo+aLqA1QZRumrEs+K
- TLSH T1F465F112B26C7DEDD0668234897155D2AF31FC312780965F13F17B622E32693BD2AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_6ecf658f7f63cc043d9adc63a4a242b6_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_6ecf658f7f63cc043d9adc63a4a242b6_icedid_luca-stealer_njrat
- Size 1.4MB
- SHA256 139250c35ee5e777de25170e3e8a4e98f20acd0c7c95662f4a6ad7cc4b62ac98
- MD5 6ecf658f7f63cc043d9adc63a4a242b6
- SHA1 8d6f0c034ea634b5237960cbecc82d1062668eb3
- SHA512 0d8188d477e2c31b810f65b49aecaab82ac9bcd62a4a41dcbb7cdf3ca9be566ae617368dc35dfd2d57a28e590165fdc02af80d1afac389d2088bc201011d0919
- SSDEEP 12288:eHDmD+0wJ1BwM+rcY4lEL6b3evjDLL8hA1QKsP5umrES7ltmP5FS:eHDfaM+rNQo+aLqA1QZRumrEs+K
- TLSH T1F465F112B26C7DEDD0668234897155D2AF31FC312780965F13F17B622E32693BD2AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1