2026-08-12_1ec3f55c0d6d5f87cceccccdb90ecab1_icedid_luca-stealer_njrat

General

Target
2026-08-12_1ec3f55c0d6d5f87cceccccdb90ecab1_icedid_luca-stealer_njrat
Size 1.5MB
Sample260812-l4hz3aem21
SHA256 eb9f8fd811e9034d1b39f30512b416ae02b2e80683d847f145a35c86480db236
MD5 1ec3f55c0d6d5f87cceccccdb90ecab1
SHA1 095f6f62eaad4e72a1d675aa69a878e7ab58ea11
SHA512 6dd96a9c0a74d5623d57a12c73455d9148bb653ce152ac62fe97a60de15840b6a925b6c1fdc2a2c36bf1aa22fc27a7eb23a2538efbb4be2018984f492c073c06
SSDEEP 24576:s8M87TKXzw3nQbarG7bjmXotfVxF02rlVsmPLebXYkyxknw4FYnshx8OfVe247:s8MDzw3NwuXoz0q+zgx4x8EVep
TLSH
T16D75C059A69C11E5E5B7C17CCEAA8503E672384A03709BDB02E0CEAA1F379E05F7D711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_1ec3f55c0d6d5f87cceccccdb90ecab1_icedid_luca-stealer_njrat

File Explorer

2026-08-12_1ec3f55c0d6d5f87cceccccdb90ecab1_icedid_luca-stealer_njrat

.exe 1.5MB

2026-08-12_1ec3f55c0d6d5f87cceccccdb90ecab1_icedid_luca-stealer_njrat

IMPHASH 36c931570bae31bc7ceccbe767be9496
SHA256 eb9f8fd811e9034d1b39f30512b416ae02b2e80683d847f145a35c86480db236
MD5 1ec3f55c0d6d5f87cceccccdb90ecab1
SHA1 095f6f62eaad4e72a1d675aa69a878e7ab58ea11
SHA512 6dd96a9c0a74d5623d57a12c73455d9148bb653ce152ac62fe97a60de15840b6a925b6c1fdc2a2c36bf1aa22fc27a7eb23a2538efbb4be2018984f492c073c06
SSDEEP 24576:s8M87TKXzw3nQbarG7bjmXotfVxF02rlVsmPLebXYkyxknw4FYnshx8OfVe247:s8MDzw3NwuXoz0q+zgx4x8EVep
TLSH
T16D75C059A69C11E5E5B7C17CCEAA8503E672384A03709BDB02E0CEAA1F379E05F7D711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

560400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ecls.pdb

kernel32

GetTimeZoneInformation GetModuleHandleW WriteFile WriteConsoleW GetConsoleMode GetUserDefaultUILanguage ExpandEnvironmentStringsW GetConsoleScreenBufferInfo GetStdHandle FormatMessageW LocalFree GetModuleHandleA GetSystemTimeAsFileTime GetCurrentThread RtlAddFunctionTable RtlDeleteFunctionTable FindFirstFileW FindClose FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDateFormatW GetSystemTime GetTimeFormatW FindFirstFileExW FindNextFileW RemoveDirectoryW CreateDirectoryW SetErrorMode ResetEvent WaitForMultipleObjects ReadFile SetEndOfFile SetFilePointer GetFileSize DeleteFileW GetFileInformationByHandle MoveFileW GetTempPathW GetTempFileNameW GetFileAttributesW SetFileAttributesW LockFileEx UnlockFileEx GetSystemInfo MapViewOfFile UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect TryEnterCriticalSection CreateSemaphoreW ReleaseSemaphore OpenFileMappingW GetExitCodeThread GetLocaleInfoW GetEnvironmentVariableW OpenProcess GetVersion GetProcessHeap HeapAlloc HeapFree OutputDebugStringA SwitchToThread HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetCommandLineW RtlUnwind GetCommandLineA SetEnvironmentVariableW GetConsoleOutputCP ReadConsoleW SetConsoleCtrlHandler ExitProcess GetFileType SetStdHandle RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetStartupInfoW SetFileTime MoveFileExW LockResource LoadResource FindResourceExW VerifyVersionInfoW VerSetConditionMask GetTickCount GetModuleFileNameW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId TlsSetValue TlsGetValue TlsFree TlsAlloc CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork CloseThreadpoolCleanupGroupMembers SetThreadpoolThreadMaximum SetThreadpoolThreadMinimum CreateThreadpoolCleanupGroup CreateThreadpool CloseThreadpoolCleanupGroup CloseThreadpool LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WaitForSingleObject SetEvent OpenEventW QueryPerformanceFrequency QueryPerformanceCounter FlushFileBuffers Sleep SetLastError LoadLibraryExW WideCharToMultiByte MultiByteToWideChar GetLastError IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter FreeLibrary GetProcAddress LoadLibraryW GetStringTypeW LCMapStringEx GetCPInfo RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter

ws2_32

WSAStartup WSACleanup

advapi32

RevertToSelf DuplicateTokenEx GetSidSubAuthority GetSidSubAuthorityCount GetSidIdentifierAuthority IsValidSid SetThreadToken AdjustTokenPrivileges LookupPrivilegeValueW ImpersonateSelf FreeSid AllocateAndInitializeSid OpenProcessToken OpenThreadToken

ole32

StringFromGUID2 CoCreateGuid

Name

.text

Size

758KB

Virtual Size

758KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

202KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_1ec3f55c0d6d5f87cceccccdb90ecab1_icedid_luca-stealer_njrat

kernel32

ws2_32

advapi32

ole32

generic