2026-08-10_af22d2295d06a26c18aba396603849c0_amadey_elex_icedid_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_af22d2295d06a26c18aba396603849c0_amadey_elex_icedid_luca-stealer_njrat
Size 3.3MB
Sample260810-lrvhbsfc72
SHA256 974b3a11f6f89b58c827b775710900d7aea6a2001722bfb13ed131aa9a23fd8b
MD5 af22d2295d06a26c18aba396603849c0
SHA1 bc63ce299cf0ffc3bb4140b6f014959803b4925a
SHA512 f1b44e4024ec8d57d5a160e5711c634cf7311afbb0f4e88d5ac5d09033db8ea76bdad6b016cf44d2471327f9de6931a3b10349adffd01fd644dd7b2a93941f6a
SSDEEP 98304:w/6KG/EFwCf0O0oxVpZx7lXHNgyR6b66dXjE2Kwq:wtxf0QDx7l9IjE2Kwq
TLSH
T196F57D2179F1907AC32313318958F179F1BDA9703BB58297D298BB292E3F1835B145EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-10_af22d2295d06a26c18aba396603849c0_amadey_elex_icedid_luca-stealer_njrat

.exe 3.3MB

2026-08-10_af22d2295d06a26c18aba396603849c0_amadey_elex_icedid_luca-stealer_njrat

IMPHASH 18254edc77a85e5cbe4b8dc764d1041c
SHA256 974b3a11f6f89b58c827b775710900d7aea6a2001722bfb13ed131aa9a23fd8b
MD5 af22d2295d06a26c18aba396603849c0
SHA1 bc63ce299cf0ffc3bb4140b6f014959803b4925a
SHA512 f1b44e4024ec8d57d5a160e5711c634cf7311afbb0f4e88d5ac5d09033db8ea76bdad6b016cf44d2471327f9de6931a3b10349adffd01fd644dd7b2a93941f6a
SSDEEP 98304:w/6KG/EFwCf0O0oxVpZx7lXHNgyR6b66dXjE2Kwq:wtxf0QDx7l9IjE2Kwq
TLSH
T196F57D2179F1907AC32313318958F179F1BDA9703BB58297D298BB292E3F1835B145EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

88:7c:dd:88:46:21:05:ec:c2:5b:37:36:0d:ba:f8:8a:53:26:be:b2:49:ef:c7:7d:c9:56:0f:10:57:eb:7d:57

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0108-01-003186,CN=Canon Inc.,O=Canon Inc.,L=Ota-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Mar 25, 2026

SERIALNUMBER=0108-01-003186,CN=Canon Inc.,O=Canon Inc.,L=Ota-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0108-01-003186,CN=Canon Inc.,O=Canon Inc.,L=Ota-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0108-01-003186,CN=Canon Inc.,O=Canon Inc.,L=Ota-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

01:2e:31:1d:0f:e1:58:42:73:1a:e7:34:d7:aa:49:c1

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 17, 2025 - Sep 16, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

2113214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\git2495\Desktop\build\Installer\Project\IJEP_Installer_v3_0_6\Source\Setup\Release\SETUP.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

VerifyVersionInfoW GetTickCount GetProfileIntW SearchPathW GetDiskFreeSpaceW ReplaceFileW GetUserDefaultLCID LocalLock LocalUnlock WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetLocaleInfoW GlobalFlags SetFileTime VerSetConditionMask FindResourceExW lstrcpyW LocalFileTimeToFileTime OutputDebugStringW GetStringTypeW SwitchToThread GetUserDefaultUILanguage GetCPInfo RtlUnwind InterlockedPushEntrySList InterlockedFlushSList ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetCommandLineA GetCommandLineW HeapQueryInformation VirtualAlloc QueryPerformanceFrequency SetStdHandle GetFileType GetStdHandle ExitProcess GetConsoleCP GetConsoleMode SetFilePointerEx GetDateFormatW GetTimeFormatW IsValidLocale EnumSystemLocalesW GetTimeZoneInformation ReadConsoleW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetFileTime GetFileSizeEx GetFileAttributesExW LCMapStringW SystemTimeToFileTime GetAtomNameW GlobalGetAtomNameW LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetPrivateProfileStringW GetPrivateProfileIntW CompareStringA lstrcmpA GetVersionExW ResumeThread SuspendThread SetThreadPriority FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime LeaveCriticalSection EnterCriticalSection CompareStringW GlobalFindAtomW GlobalAddAtomW GlobalDeleteAtom FreeResource GetCurrentThreadId EncodePointer GetThreadLocale GetStringTypeExW LoadLibraryW LoadLibraryA GetModuleHandleA DuplicateHandle OutputDebugStringA WriteFile UnlockFile SetFilePointer SetEndOfFile ReadFile LockFile GetVolumeInformationW GetShortPathNameW GetFullPathNameW GetFileSize FlushFileBuffers WideCharToMultiByte MulDiv GlobalFree GlobalUnlock GlobalLock GlobalSize GlobalAlloc SetLastError LoadLibraryExA VirtualQuery VirtualProtect GetSystemInfo ReleaseMutex GetTempPathW GetTickCount64 CreateProcessW GetExitCodeProcess CreateEventW ResetEvent SetEvent GetModuleFileNameW SetErrorMode SetCurrentDirectoryW GetDriveTypeW MoveFileExW MoveFileW CopyFileW WritePrivateProfileSectionW GetPrivateProfileSectionW WritePrivateProfileStringW FormatMessageW LocalFree LocalAlloc GetModuleHandleW OpenProcess GetExitCodeThread GetCurrentThread CreateThread GetCurrentProcessId GetCurrentProcess Sleep OpenMutexW CreateMutexW WaitForSingleObject CloseHandle SetFileAttributesW RemoveDirectoryW GetTempFileNameW GetFileAttributesW GetDiskFreeSpaceExW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateFileW CreateDirectoryW GetCurrentDirectoryW lstrcmpiW lstrcmpW LoadLibraryExW GetProcAddress FreeLibrary GetWindowsDirectoryW GetSystemDirectoryW MultiByteToWideChar FindResourceW SizeofResource LockResource LoadResource DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer FreeEnvironmentStringsW SetEnvironmentVariableW SetConsoleCtrlHandler GetSystemDefaultUILanguage WriteConsoleW GetEnvironmentStringsW

user32

SetParent OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl IsZoomed GetSystemMenu BringWindowToTop SetCursorPos CopyIcon FrameRect DrawIcon LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW GetMenuBarInfo UnpackDDElParam ReuseDDElParam RegisterClipboardFormatW UnionRect UpdateLayeredWindow MonitorFromPoint GetComboBoxInfo PostThreadMessageW GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable LockWindowUpdate SetMenuDefaultItem GetDoubleClickTime ModifyMenuW CharUpperBuffW IsClipboardFormatAvailable GetUpdateRect EnumChildWindows DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel SubtractRect SendNotifyMessageW MonitorFromRect InSendMessage CreateMenu WindowFromDC GetWindowRgn DestroyCursor GetDCEx GetTabbedTextExtentW SetClassLongW EnumDisplayMonitors SetLayeredWindowAttributes NotifyWinEvent InvertRect HideCaret EnableScrollBar GetIconInfo DrawIconEx DrawFocusRect GetMenuDefaultItem CreatePopupMenu MessageBeep GetNextDlgGroupItem IsRectEmpty SetRect InvalidateRgn CopyAcceleratorTableW CharNextW WindowFromPoint ReleaseCapture SetCapture WaitMessage KillTimer SetTimer DeleteMenu IntersectRect LoadImageW DestroyIcon TrackMouseEvent GetDialogBaseUnits GetAsyncKeyState CopyImage SystemParametersInfoW InflateRect GetMenuItemInfoW DestroyMenu RealChildWindowFromPoint LoadCursorW GetSysColorBrush MapDialogRect SetWindowContextHelpId SetCursor ShowOwnedPopups PostQuitMessage GetCursorPos GetMessageW MapVirtualKeyW GetKeyNameTextW FillRect ClientToScreen GetWindowDC TabbedTextOutW DrawTextExW DrawTextW LoadMenuW OffsetRect SetRectEmpty SendDlgItemMessageA GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetLastActivePopup GetTopWindow GetClassNameW GetClassLongW PtInRect EqualRect CopyRect GetSysColor MapWindowPoints ScreenToClient AdjustWindowRectEx GetClientRect RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange ScrollWindow RedrawWindow ValidateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenuEx TrackPopupMenu SetMenu GetMenu GetCapture GetKeyState IsIconic IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement DestroyWindow IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW SetWindowLongW SetWindowTextW ScrollWindowEx IsWindowEnabled GetDlgCtrlID SendDlgItemMessageW IsDlgButtonChecked CheckRadioButton CheckDlgButton GetDlgItemTextW SetDlgItemTextW GetDlgItemInt SetDlgItemInt GetDlgItem SetWindowPos MoveWindow ShowWindow IsWindow LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus GetWindow GetWindowLongW GetWindowTextLengthW GetWindowTextW GetScrollPos SetScrollPos SetFocus GetSystemMetrics CharUpperW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW PostMessageW ExitWindowsEx IsDialogMessageW GetWindowThreadProcessId GetParent GetDesktopWindow MessageBoxW PeekMessageW DispatchMessageW TranslateMessage LoadStringW GetWindowRect InvalidateRect ReleaseDC GetDC SendMessageW SetWindowRgn EnableWindow UnregisterClassW GrayStringW

gdi32

GetObjectW BitBlt CreateCompatibleDC CreateDIBPatternBrushPt CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn CreateSolidBrush DeleteObject Escape ExcludeClipRect GetClipBox GetClipRgn GetCurrentPositionEx GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo OffsetClipRgn PlayMetaFile PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapperFlags SetGraphicsMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetStretchBltMode SetTextCharacterExtra SetTextAlign SetTextJustification SetTextColor PlayMetaFileRecord EnumMetaFile SetWorldTransform ModifyWorldTransform SetColorAdjustment StartDocW ArcTo PolyDraw SelectClipPath SetArcDirection ExtCreatePen MoveToEx TextOutW ExtTextOutW PolyBezierTo PolylineTo SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateRectRgnIndirect PatBlt CreateFontIndirectW GetTextMetricsW CombineRgn GetMapMode SetRectRgn DPtoLP GetBkColor GetTextColor GetRgnBox EnumFontFamiliesExW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo GetDIBits SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse CreatePolygonRgn Polygon Polyline CreateRoundRectRgn LPtoDP Rectangle OffsetRgn GetCurrentObject CreateFontW GetCharWidthW StretchDIBits RoundRect FillRgn FrameRgn GetBoundsRect PtInRegion ExtFloodFill SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx CloseMetaFile CreateMetaFileW DeleteMetaFile EndDoc StartPage EndPage AbortDoc SetAbortProc GetROP2 GetBkMode GetNearestColor GetPolyFillMode GetStretchBltMode GetTextAlign GetTextFaceW SetBkColor CreateBitmap GetDeviceCaps DeleteDC CreateDCW CopyMetaFileW GetTextExtentPoint32W

msimg32

TransparentBlt AlphaBlend

uxtheme

IsAppThemed GetWindowTheme GetThemeSysColor GetThemeColor DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground IsThemeBackgroundPartiallyTransparent GetCurrentThemeName GetThemePartSize

ole32

CoGetMalloc OleQueryLinkFromData OleQueryCreateFromData OleInitialize OleUninitialize OleSetClipboard OleRun CoInitializeEx CreateStreamOnHGlobal CreateILockBytesOnHGlobal GetRunningObjectTable CreateOleAdviseHolder CreateDataAdviseHolder OleGetIconOfClass OleSetContainedObject OleSaveToStream OleSave OleLoad OleCreateFromFile OleCreateLinkToFile OleCreateStaticFromData OleCreateLinkFromData OleCreateFromData OleCreate CreateItemMoniker CreateGenericComposite GetHGlobalFromILockBytes WriteClassStm OleRegEnumVerbs OleRegGetMiscStatus IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CreateFileMoniker OleIsRunning StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject StgIsStorageFile StgOpenStorage StringFromGUID2 CLSIDFromProgID CLSIDFromString SetConvertStg OleRegGetUserType ReleaseStgMedium OleDuplicateData ReadFmtUserTypeStg WriteFmtUserTypeStg CreateBindCtx CoTreatAsClass WriteClassStg ReadClassStg StringFromCLSID CoTaskMemAlloc CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree CoCreateGuid StgCreateDocfile OleLockRunning OleSetMenuDescriptor CoRegisterMessageFilter CoRevokeClassObject CoRegisterClassObject PropVariantCopy RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop OleIsCurrentClipboard OleFlushClipboard CoFreeUnusedLibraries

oledlg

OleUIBusyW

oleacc

AccessibleObjectFromWindow CreateStdAccessibleObject LresultFromObject

gdiplus

GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFileICM GdipCreateBitmapFromStreamICM GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_af22d2295d06a26c18aba396603849c0_amadey_elex_icedid_luca-stealer_njrat

version

kernel32

user32

gdi32

msimg32

uxtheme

ole32

oledlg

oleacc

gdiplus

imm32

winmm

generic