2026-08-09_fb01ce36d507b81590867d8086f68aa3_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_fb01ce36d507b81590867d8086f68aa3_icedid_luca-stealer_njrat_stealc
Size 1.5MB
Sample260809-j8e3vsxvcs
SHA256 f8534401bef1f129d722104676aace9415257a0e4569f9591e971ee57f8f8f8a
MD5 fb01ce36d507b81590867d8086f68aa3
SHA1 042e0df509301060d5edd66820619d4995b6b86e
SHA512 4ba9caebda99e337c1b0f654feab5c8b6aae6c6cedc1441d7594cd2c906c3bfd410b2deb9b804ccce99471ffa8c946ad348fd147d518f5d542b560ec81f22270
SSDEEP 24576:k9N+xvrJixvXDfkN1U9WaBoBNbA3qmTjPTuFxKO9n4jc4WEootkSHZ1r/:k9NeNS9bsNoTlMnyc3EJLX
TLSH
T1DE758E17A55443E9D07A82B8AD475E5EEF353C0D47906AEF03A10E963F723E10EBE216
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_fb01ce36d507b81590867d8086f68aa3_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-09_fb01ce36d507b81590867d8086f68aa3_icedid_luca-stealer_njrat_stealc

.exe 1.5MB

2026-08-09_fb01ce36d507b81590867d8086f68aa3_icedid_luca-stealer_njrat_stealc

IMPHASH 0f57fa0a4bfddaf6e815b59c183ff5ff
SHA256 f8534401bef1f129d722104676aace9415257a0e4569f9591e971ee57f8f8f8a
MD5 fb01ce36d507b81590867d8086f68aa3
SHA1 042e0df509301060d5edd66820619d4995b6b86e
SHA512 4ba9caebda99e337c1b0f654feab5c8b6aae6c6cedc1441d7594cd2c906c3bfd410b2deb9b804ccce99471ffa8c946ad348fd147d518f5d542b560ec81f22270
SSDEEP 24576:k9N+xvrJixvXDfkN1U9WaBoBNbA3qmTjPTuFxKO9n4jc4WEootkSHZ1r/:k9NeNS9bsNoTlMnyc3EJLX
TLSH
T1DE758E17A55443E9D07A82B8AD475E5EEF353C0D47906AEF03A10E963F723E10EBE216
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

697288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

d3dcompiler_47

D3DCompile

comdlg32

GetSaveFileNameW GetOpenFileNameW

winhttp

WinHttpSetOption WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpOpenRequest WinHttpCrackUrl WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpAddRequestHeaders WinHttpQueryDataAvailable

ole32

CoCreateInstance CoInitializeEx CoUninitialize

shell32

ShellExecuteA ShellExecuteExW SHGetFolderPathW ShellExecuteW

kernel32

ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree MultiByteToWideChar WideCharToMultiByte GetEnvironmentVariableW DeleteFileW MoveFileExW GetLastError GetModuleHandleW GlobalFree LocalFree GetCommandLineW CloseHandle GetCurrentProcess GetModuleFileNameW GetExitCodeProcess OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW K32GetProcessMemoryInfo QueryPerformanceCounter QueryPerformanceFrequency LoadResource LockResource SizeofResource FindResourceW GetProcAddress LoadLibraryW GetFileAttributesA GetWindowsDirectoryA Sleep VerSetConditionMask FreeLibrary GetModuleHandleA LoadLibraryA GlobalAlloc GlobalUnlock GlobalLock FlsSetValue FlsGetValue FlsAlloc GetTimeZoneInformation GetFileType HeapAlloc HeapFree ExitProcess WriteFile GetStdHandle ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx RaiseException RtlPcToFileHeader GetStartupInfoW IsDebuggerPresent InitializeSListHead GetCurrentProcessId IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW GetSystemTimeAsFileTime HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW RtlUnwind SetEndOfFile GetLocaleInfoA FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW GetCurrentThreadId WaitForSingleObjectEx GetExitCodeThread WakeConditionVariable WakeAllConditionVariable InitOnceBeginInitialize InitOnceComplete EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx

user32

MonitorFromWindow LoadCursorA ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetClientRect ReleaseDC GetDC GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout SetProcessDpiAwarenessContext LoadIconW CloseClipboard SetWindowLongPtrW GetWindowLongPtrW GetWindowRect UpdateWindow GetSystemMetrics IsZoomed IsIconic ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW SetClipboardData PeekMessageW DispatchMessageW TranslateMessage GetWindow GetWindowThreadProcessId EnumWindows GetWindowTextW IsWindowVisible SetWindowPos GetClipboardData OpenClipboard EmptyClipboard LoadCursorW PostMessageW

gdi32

GetDeviceCaps GetStockObject

advapi32

OpenProcessToken GetTokenInformation

imm32

ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow ImmGetContext

Name

.text

Size

893KB

Virtual Size

892KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

201KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

429KB

Virtual Size

429KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_fb01ce36d507b81590867d8086f68aa3_icedid_luca-stealer_njrat_stealc

d3d11

dwmapi

d3dcompiler_47

comdlg32

winhttp

ole32

shell32

kernel32

user32

gdi32

advapi32

imm32

generic