2026-08-11_9bfdbad282970315b1a2e40b137edc22_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_9bfdbad282970315b1a2e40b137edc22_icedid_luca-stealer_njrat_stealc
Size 1.4MB
Sample260811-wthlnaff84
SHA256 3e73bbb22de11eb212875e0468ac146b7c4c2c7213e4fe3eb5d3c5d2635f1263
MD5 9bfdbad282970315b1a2e40b137edc22
SHA1 80133a9ace26943a4bbd83726713eb8da3ed4a6f
SHA512 5eca4de6584636e0f89038953d99afb02bb3a62cd6a8ee88b9fd7a25119648575b555d3242163c2c9feed26fb2333bcc58be1007d4f60e9c752c59e5cbaa4691
SSDEEP 24576:rfEdVuFgms7wqtCCxqpppKPe7vJKhRMfyZHSsWZ7teA:rfEdkFqL5w0erBfyJg
TLSH
T1CF65BF1BF7D746ADE377A638CAA29712A6B5B8260B7745CF03405923DDA74C0CEB4312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_9bfdbad282970315b1a2e40b137edc22_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-11_9bfdbad282970315b1a2e40b137edc22_icedid_luca-stealer_njrat_stealc

.exe 1.4MB

2026-08-11_9bfdbad282970315b1a2e40b137edc22_icedid_luca-stealer_njrat_stealc

IMPHASH a292dc484cb8fbbe8a6b53fe71d05f57
SHA256 3e73bbb22de11eb212875e0468ac146b7c4c2c7213e4fe3eb5d3c5d2635f1263
MD5 9bfdbad282970315b1a2e40b137edc22
SHA1 80133a9ace26943a4bbd83726713eb8da3ed4a6f
SHA512 5eca4de6584636e0f89038953d99afb02bb3a62cd6a8ee88b9fd7a25119648575b555d3242163c2c9feed26fb2333bcc58be1007d4f60e9c752c59e5cbaa4691
SSDEEP 24576:rfEdVuFgms7wqtCCxqpppKPe7vJKhRMfyZHSsWZ7teA:rfEdkFqL5w0erBfyJg
TLSH
T1CF65BF1BF7D746ADE377A638CAA29712A6B5B8260B7745CF03405923DDA74C0CEB4312
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

297680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

YandereTogether.pdb

d2d1

ord1

dwrite

DWriteCreateFactory

dwmapi

DwmSetWindowAttribute

ws2_32

bind closesocket ioctlsocket htonl htons ntohl WSAIoctl gethostname WSAStartup WSACleanup getaddrinfo freeaddrinfo ntohs recvfrom sendto socket InetNtopW WSAGetLastError

advapi32

RegDeleteValueW RegOpenKeyExW RegEnumValueW RegCloseKey

comdlg32

GetOpenFileNameW

bcrypt

BCryptHash BCryptOpenAlgorithmProvider BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptImportKeyPair BCryptDestroyKey BCryptVerifySignature BCryptCloseAlgorithmProvider

kernel32

SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA HeapSize GetOEMCP GetStringTypeW IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc SetEndOfFile GetACP FlushFileBuffers WriteConsoleW GetCPInfo LCMapStringW VirtualProtect GetModuleHandleW GetProcAddress GetTickCount64 GlobalAlloc GlobalUnlock GlobalLock GlobalFree MulDiv LoadResource LockResource SizeofResource FindResourceW SetEnvironmentVariableW CreateDirectoryW CreateFileW DeleteFileW GetFileAttributesW ReadFile CloseHandle GetLastError FreeLibrary GetModuleFileNameW LoadLibraryW CopyFileW WriteFile MultiByteToWideChar WideCharToMultiByte GetFileSizeEx GetLocalTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FileTimeToSystemTime SystemTimeToFileTime GetFileAttributesExW MoveFileExW GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError RtlUnwindEx RaiseException RtlPcToFileHeader ExitProcess InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc InitOnceComplete InitOnceBeginInitialize TryAcquireSRWLockExclusive GetExitCodeThread WaitForSingleObjectEx SetFilePointerEx GetConsoleOutputCP ReadConsoleW GetConsoleMode GetFileType HeapAlloc HeapFree GetStdHandle ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead

user32

TrackMouseEvent GetMessageW TranslateMessage SetProcessDPIAware DefWindowProcW PostQuitMessage RegisterClassExW CreateWindowExW DestroyWindow DispatchMessageW UpdateWindow ShowWindow GetClientRect GetDpiForSystem GetDpiForWindow SystemParametersInfoW LoadImageW LoadCursorW SetCursor MessageBoxW InvalidateRect EndPaint BeginPaint ScreenToClient GetSystemMetrics KillTimer SetTimer ReleaseCapture SetCapture GetKeyState EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard IsIconic SetWindowPos

shell32

ShellExecuteW

ole32

CoUninitialize CoCreateInstance CoInitializeEx

winhttp

WinHttpCrackUrl WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetTimeouts WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders

Name

.text

Size

468KB

Virtual Size

468KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

125KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

800KB

Virtual Size

799KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_9bfdbad282970315b1a2e40b137edc22_icedid_luca-stealer_njrat_stealc

d2d1

dwrite

dwmapi

ws2_32

advapi32

comdlg32

bcrypt

kernel32

user32

shell32

ole32

winhttp

generic