2026-08-11_191890f0e88687a4f1547c24bf00d27d_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_191890f0e88687a4f1547c24bf00d27d_icedid_luca-stealer_njrat_stealc
Size 1.1MB
Sample260811-ebzzjscc98
SHA256 e23d0f3b24cc09dfbea5683a88f9580c8416d6b5c460d3b58bb7965a38931d90
MD5 191890f0e88687a4f1547c24bf00d27d
SHA1 f7c773ae89beadb18389549014ea65df556e81b2
SHA512 db25be6cfcedc78ce9bccb45bd1a964db8c3dd6417c601d5a858539b77cc7ab4298798ad3ee155a1edacec237e8044bd9a4b986fbe33fc6572a6b22b07342cf0
SSDEEP 12288:CWDd+sWTgtKiT76PgTmHN/1LBFDzWymSsHepFBCSHCV4RjiCinMosmtKwRBP:CWD8sgMKiTA/kSs+pFBMsiZnMni
TLSH
T18735AF45B2E641F8E07FA574E9A1651BE63238550B308ADF17D0065C6FB3BE04AFBB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_191890f0e88687a4f1547c24bf00d27d_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-11_191890f0e88687a4f1547c24bf00d27d_icedid_luca-stealer_njrat_stealc

.exe 1.1MB

2026-08-11_191890f0e88687a4f1547c24bf00d27d_icedid_luca-stealer_njrat_stealc

IMPHASH 1ab08421725c1575d2eb737c54a41c30
SHA256 e23d0f3b24cc09dfbea5683a88f9580c8416d6b5c460d3b58bb7965a38931d90
MD5 191890f0e88687a4f1547c24bf00d27d
SHA1 f7c773ae89beadb18389549014ea65df556e81b2
SHA512 db25be6cfcedc78ce9bccb45bd1a964db8c3dd6417c601d5a858539b77cc7ab4298798ad3ee155a1edacec237e8044bd9a4b986fbe33fc6572a6b22b07342cf0
SSDEEP 12288:CWDd+sWTgtKiT76PgTmHN/1LBFDzWymSsHepFBCSHCV4RjiCinMosmtKwRBP:CWD8sgMKiTA/kSs+pFBMsiZnMni
TLSH
T18735AF45B2E641F8E07FA574E9A1651BE63238550B308ADF17D0065C6FB3BE04AFBB12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

613732

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmExtendFrameIntoClientArea

d3dcompiler_47

D3DCompile

api-ms-win-core-processenvironment-l1-1-0

SetStdHandle SetEnvironmentVariableW GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA

api-ms-win-core-file-l1-1-0

FlushFileBuffers WriteFile ReadFile CreateFileW SetFilePointerEx SetEndOfFile GetFileSizeEx GetFileAttributesA FindClose FindFirstFileExW FindNextFileW GetFileType

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

RaiseException GetLastError SetLastError

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection LeaveCriticalSection WaitForSingleObject EnterCriticalSection SetEvent InitializeCriticalSectionAndSpinCount CreateEventW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-memory-l1-1-0

ReadProcessMemory VirtualProtect WriteProcessMemory

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA GetModuleHandleA GetModuleHandleExW FreeLibraryAndExitThread LoadLibraryExW GetModuleFileNameW GetProcAddress FreeLibrary

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics

api-ms-win-core-console-l1-1-0

SetConsoleMode GetConsoleMode WriteConsoleA WriteConsoleW AllocConsole GetConsoleOutputCP ReadConsoleW

api-ms-win-core-console-l2-1-0

SetConsoleOutputCP SetConsoleCursorInfo SetConsoleScreenBufferSize SetConsoleWindowInfo

api-ms-win-core-console-l2-2-0

SetConsoleTitleA

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize

api-ms-win-core-toolhelp-l1-1-0

CreateToolhelp32Snapshot

api-ms-win-core-kernel32-legacy-l1-1-2

Process32Next Process32First

mmdevapi

ord17

api-ms-win-core-debug-l1-1-0

OutputDebugStringA OutputDebugStringW

api-ms-win-core-heap-l2-1-0

GlobalFree GlobalAlloc

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock GlobalUnlock

api-ms-win-core-string-l1-1-0

GetStringTypeW WideCharToMultiByte CompareStringW MultiByteToWideChar

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA

api-ms-win-core-localization-l1-2-0

GetCPInfo LCMapStringW IsDBCSLeadByte GetOEMCP IsValidCodePage GetACP GetLocaleInfoA

user32

ScreenToClient ClientToScreen SetCursor TranslateMessage DispatchMessageA PeekMessageA DefWindowProcA PostQuitMessage RegisterClassExA CreateWindowExA DestroyWindow ShowWindow SetLayeredWindowAttributes SetWindowDisplayAffinity IsWindowVisible GetAsyncKeyState SendInput MapVirtualKeyA UpdateWindow SetForegroundWindow GetWindowTextA MessageBoxA GetCursorPos GetWindowLongPtrA SetWindowLongPtrA EnumWindows GetWindowThreadProcessId SetWindowsHookExA CallNextHookEx LoadCursorA OpenClipboard CloseClipboard SetClipboardData GetClipboardData EmptyClipboard GetKeyboardLayout TrackMouseEvent GetMessageExtraInfo DefWindowProcW GetKeyState GetCapture SetCapture ReleaseCapture IsWindowUnicode GetForegroundWindow GetClientRect SetCursorPos

shell32

ShellExecuteW

kernel32

Module32First Module32Next TerminateProcess GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead GetCurrentProcessId WakeAllConditionVariable GetModuleHandleW WaitForSingleObjectEx GetSystemTimeAsFileTime InitializeCriticalSectionEx SleepConditionVariableSRW TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive Sleep GetCurrentThreadId GetExitCodeThread

imm32

ImmSetCandidateWindow ImmReleaseContext ImmSetCompositionWindow ImmGetContext

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader RtlUnwindEx

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-processthreads-l1-1-0

TlsAlloc CreateThread ExitThread ExitProcess TlsGetValue TlsSetValue TlsFree

api-ms-win-core-heap-l1-1-0

HeapFree HeapSize GetProcessHeap HeapReAlloc HeapAlloc

api-ms-win-core-fibers-l1-1-0

FlsSetValue FlsFree FlsGetValue FlsAlloc

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformation

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

oleaut32

SysFreeString SysStringLen GetErrorInfo SetErrorInfo

Name

.text

Size

802KB

Virtual Size

801KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

256KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_191890f0e88687a4f1547c24bf00d27d_icedid_luca-stealer_njrat_stealc

d3d11

dwmapi

d3dcompiler_47

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-memory-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-console-l2-1-0

api-ms-win-core-console-l2-2-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-toolhelp-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-2

mmdevapi

api-ms-win-core-debug-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-localization-l1-2-0

user32

shell32

kernel32

imm32

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

oleaut32

generic