General
- Target 2026-08-12_2b40fa10df1915093ea61f4875e3d320_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 3.7MB
- Sample260812-l3qzaathmh
- SHA256 153f55ad5056c81abcf1f8e3d85f72ea3eeb3e6e65757d6967ecd0d080ad9494
- MD5 2b40fa10df1915093ea61f4875e3d320
- SHA1 1b493676f2c55b4ff1ad0b63819cd1a0812b22b8
- SHA512 e125b59f7faffb8e4520a44f885bf10b1145963806f326a64bb97263a883ba890c3274b82e1105842a72ddfbab4b1acd8407592aac55f4a88942703bfa8ded8c
- SSDEEP 49152:tSUYFNs7v4y3VkT8+HE3uxuMvAKrTZrNyA+2dzsmw3uu7ZXNGqhT8p5QCgnJ5:cMjVMxdAGTZ33El03k
- TLSH T15706F10AE1978268DFB35B3888946223D1B17CD647F0C7D72A9D4A749F339B42A7D702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_2b40fa10df1915093ea61f4875e3d320_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_2b40fa10df1915093ea61f4875e3d320_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_2b40fa10df1915093ea61f4875e3d320_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 3.7MB
- SHA256 153f55ad5056c81abcf1f8e3d85f72ea3eeb3e6e65757d6967ecd0d080ad9494
- MD5 2b40fa10df1915093ea61f4875e3d320
- SHA1 1b493676f2c55b4ff1ad0b63819cd1a0812b22b8
- SHA512 e125b59f7faffb8e4520a44f885bf10b1145963806f326a64bb97263a883ba890c3274b82e1105842a72ddfbab4b1acd8407592aac55f4a88942703bfa8ded8c
- SSDEEP 49152:tSUYFNs7v4y3VkT8+HE3uxuMvAKrTZrNyA+2dzsmw3uu7ZXNGqhT8p5QCgnJ5:cMjVMxdAGTZ33El03k
- TLSH T15706F10AE1978268DFB35B3888946223D1B17CD647F0C7D72A9D4A749F339B42A7D702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory