2026-08-10_7b83682f3e10bc0e2b62d8ef278baa76_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_7b83682f3e10bc0e2b62d8ef278baa76_icedid_luca-stealer_njrat_stealc
Size 1.1MB
Sample260810-e896sav1av
SHA256 09fa93112262fb3fe6c36d6f3eadb2bd32f590fa82cf9f65a968913ed1493cce
MD5 7b83682f3e10bc0e2b62d8ef278baa76
SHA1 bcdb1d5cd2d8fd66b0531cab255be28bc6ae0b2a
SHA512 7ab40929f49a7dbba96950a61acde0e853cb8189f5186be0dd526235ad0116ba44a2fef20804d10af3c430b920dab5429a8029e12dbc787e4bb61fad2722021d
SSDEEP 24576:3gXufd4b+lmdGKhWzz+gOLp+ePEU6pUwMnwlzM:1/lmdBWz29UunwK
TLSH
T1C645AF1E656E01A5CEA5967CC97A5757F322BC4D47744AE723E014A43F23AE80B3EF02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_7b83682f3e10bc0e2b62d8ef278baa76_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-10_7b83682f3e10bc0e2b62d8ef278baa76_icedid_luca-stealer_njrat_stealc

.exe 1.1MB

2026-08-10_7b83682f3e10bc0e2b62d8ef278baa76_icedid_luca-stealer_njrat_stealc

IMPHASH db9d2fb197cb08c2035628f0432646bb
SHA256 09fa93112262fb3fe6c36d6f3eadb2bd32f590fa82cf9f65a968913ed1493cce
MD5 7b83682f3e10bc0e2b62d8ef278baa76
SHA1 bcdb1d5cd2d8fd66b0531cab255be28bc6ae0b2a
SHA512 7ab40929f49a7dbba96950a61acde0e853cb8189f5186be0dd526235ad0116ba44a2fef20804d10af3c430b920dab5429a8029e12dbc787e4bb61fad2722021d
SSDEEP 24576:3gXufd4b+lmdGKhWzz+gOLp+ePEU6pUwMnwlzM:1/lmdBWz29UunwK
TLSH
T1C645AF1E656E01A5CEA5967CC97A5757F322BC4D47744AE723E014A43F23AE80B3EF02
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

613588

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GlobalAlloc GlobalFree GlobalLock GlobalUnlock QueryPerformanceFrequency QueryPerformanceCounter VirtualFree DeviceIoControl VirtualAlloc CreateFileW GetCurrentThreadId GetModuleHandleA CloseHandle GetProcAddress GetCurrentProcessId GetModuleFileNameW GetTempPathW SetConsoleTextAttribute GetStdHandle SetConsoleMode ReadConsoleA Sleep GetConsoleMode GetConsoleWindow GetCurrentProcess OpenProcess CreateToolhelp32Snapshot Process32NextW CreateFileA Process32FirstW Beep ExitProcess WideCharToMultiByte VirtualQueryEx FlushFileBuffers SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose CreatePipe GetFileAttributesExW GetExitCodeProcess WaitForSingleObject HeapReAlloc GetFileSizeEx GetConsoleOutputCP EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetFileType FormatMessageA LocalFree GetLocaleInfoEx ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx CompareStringEx GetCPInfo WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ReadFile DeleteFileW DuplicateHandle CreateProcessW GetModuleHandleExW WriteFile GetCommandLineA GetCommandLineW SetFilePointerEx ReadConsoleW RtlUnwind

user32

GetAsyncKeyState MessageBoxW SetWindowPos DefWindowProcW GetWindowThreadProcessId SetWindowDisplayAffinity GetForegroundWindow MoveWindow IsWindow

shell32

ShellExecuteA

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

ws2_32

recv getsockopt freeaddrinfo ioctlsocket ntohs setsockopt WSAGetLastError getnameinfo socket send getpeername __WSAFDIsSet WSACleanup connect WSAStartup getaddrinfo WSASocketW shutdown closesocket select

secureenginesdk64

ord2 ord1

Name

.text

Size

807KB

Virtual Size

807KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

272KB

Virtual Size

272KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

18KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_7b83682f3e10bc0e2b62d8ef278baa76_icedid_luca-stealer_njrat_stealc

kernel32

user32

shell32

ntdll

ws2_32

secureenginesdk64

generic