2026-08-09_d6ece76ab5172877ee2764003b182136_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_d6ece76ab5172877ee2764003b182136_icedid_luca-stealer_njrat_stealc
Size 4.8MB
Sample260809-fjffjstyfy
SHA256 32cdf00343dfa6b245785ef7207b61dea674a6f8684459cc6daebff89a4cd3e1
MD5 d6ece76ab5172877ee2764003b182136
SHA1 1a797a287c3f5d46b490fe34c6d0d3aaf42383fe
SHA512 bf5dfa33c4b92f052512b11398300793de77701bb25d5a300e5058ffaff5a374104a3d2668b31c37e5a390fed13437a31f581d8acc709913e760a5247b60d452
SSDEEP 49152:B7rIdCDXX38IfKK/QtgRu9ysv9zlBdLQ642DifNh0qmoN0/4ym/9Ym8qVkqblj2t:JY77QQDGzzD7hRcX4kwzYs
TLSH
T1F2365F8B62E46116C584056CB66EBBE6C8DF2E13003B8FD21CD4DDEB5E559EDEC20329
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_d6ece76ab5172877ee2764003b182136_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-09_d6ece76ab5172877ee2764003b182136_icedid_luca-stealer_njrat_stealc

.exe 4.8MB

2026-08-09_d6ece76ab5172877ee2764003b182136_icedid_luca-stealer_njrat_stealc

IMPHASH 1b508309d699735ae4ae82dd8fdd78e4
SHA256 32cdf00343dfa6b245785ef7207b61dea674a6f8684459cc6daebff89a4cd3e1
MD5 d6ece76ab5172877ee2764003b182136
SHA1 1a797a287c3f5d46b490fe34c6d0d3aaf42383fe
SHA512 bf5dfa33c4b92f052512b11398300793de77701bb25d5a300e5058ffaff5a374104a3d2668b31c37e5a390fed13437a31f581d8acc709913e760a5247b60d452
SSDEEP 49152:B7rIdCDXX38IfKK/QtgRu9ysv9zlBdLQ642DifNh0qmoN0/4ym/9Ym8qVkqblj2t:JY77QQDGzzD7hRcX4kwzYs
TLSH
T1F2365F8B62E46116C584056CB66EBBE6C8DF2E13003B8FD21CD4DDEB5E559EDEC20329
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98108

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FreeLibrary GetProcAddress LoadLibraryExA GetEnvironmentVariableA FindClose CloseHandle GetLastError QueryPerformanceCounter HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentProcess GetCurrentProcessId SwitchToThread GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree VirtualProtect CreateFileW SetLastError GetModuleFileNameW GetModuleHandleW LoadLibraryExW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetSystemTimeAsFileTime InitializeSListHead SetEndOfFile RtlPcToFileHeader RaiseException RtlUnwindEx EncodePointer InitializeCriticalSectionAndSpinCount ExitProcess GetModuleHandleExW ReadFile SetStdHandle GetFileType GetStdHandle WriteFile GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx CompareStringW LCMapStringW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW SetFilePointerEx MultiByteToWideChar DeleteFileW MoveFileExW GetFileSizeEx FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetStringTypeW HeapSize WriteConsoleW

Name

.text

Size

226KB

Virtual Size

225KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nv_fatb

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nvFatBi

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

__nv_man

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_d6ece76ab5172877ee2764003b182136_icedid_luca-stealer_njrat_stealc

kernel32

generic