General
- Target 2026-08-09_4df883c61d05382803e17828f9d85089_icedid_luca-stealer_njrat_stealc
- Size 1.8MB
- Sample260809-vddr4aam5y
- SHA256 b024e74b724419bcf4cb53c351ac599b49170315a61c32f4196e9813a6e732fb
- MD5 4df883c61d05382803e17828f9d85089
- SHA1 5773889fd17fcfd1cd32150a3d3b22b166b33774
- SHA512 a253801f05bc5697d814b3cfecf309c48cb86100a027c1eea149405b5c61732ad3985f6410f0d3394f315e0f13096bc36d5ae16cfbd0cdc267d187d31a397fd8
- SSDEEP 24576:KOI61cHwmAd30FXGCh6/vj+7zIEDIJFKXRNGn9cw0TjtTFi/H:pI6VkF2BvI0WXRYgxT4
- TLSH T17C957E17A3A801FCD1A7C179CD465A0BE7B2740517B19ADF06D08AA66F23EE11F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4df883c61d05382803e17828f9d85089_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4df883c61d05382803e17828f9d85089_icedid_luca-stealer_njrat_stealc
- Size 1.8MB
- SHA256 b024e74b724419bcf4cb53c351ac599b49170315a61c32f4196e9813a6e732fb
- MD5 4df883c61d05382803e17828f9d85089
- SHA1 5773889fd17fcfd1cd32150a3d3b22b166b33774
- SHA512 a253801f05bc5697d814b3cfecf309c48cb86100a027c1eea149405b5c61732ad3985f6410f0d3394f315e0f13096bc36d5ae16cfbd0cdc267d187d31a397fd8
- SSDEEP 24576:KOI61cHwmAd30FXGCh6/vj+7zIEDIJFKXRNGn9cw0TjtTFi/H:pI6VkF2BvI0WXRYgxT4
- TLSH T17C957E17A3A801FCD1A7C179CD465A0BE7B2740517B19ADF06D08AA66F23EE11F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.