ba2af54c3e1968bfc4b14fbf0b8c03421f01a8ceef8bea3b4c5bb7b71aa0336f | Triage™

Login
Reports

Overview

overview

9

Static

static

3

2026-08-13...lc.exe

windows10-2004-x64

9

2026-08-13...lc.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-13_b8fabf35c54c20089cb068389bbbd863_icedid_luca-stealer_njrat_stealc
Size 1.9MB
Sample260813-pg217sygrf
SHA256 ba2af54c3e1968bfc4b14fbf0b8c03421f01a8ceef8bea3b4c5bb7b71aa0336f
MD5 b8fabf35c54c20089cb068389bbbd863
SHA1 e0161848dec299432ab3aeba41ebf607bf1b7528
SHA512 08879187ceaa3f01c5e46ac6df3cb4e7a0e32f7bd06aa44640d4a7447654e954e413aad768b1cd644877ebfbf4575888a638c07b965920862915de6ee91a6f15
SSDEEP 24576:s42ypCOZbL0rVLv3dVD2F1rsCr8y8dO1dmK3BIJ8A2bJ5Q+:srsCOlorVL1VDGrT8c1iRIJ5Q
TLSH
T140951932E29C26ACD0A2D179EE869C52DA31748D03717FFB01915E921F9BDE04B7E352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-13_b8fabf35c54c20089cb068389bbbd863_icedid_luca-stealer_njrat_stealc.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion

Behavioral task

behavioral2

Sample

2026-08-13_b8fabf35c54c20089cb068389bbbd863_icedid_luca-stealer_njrat_stealc.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  2026-08-13_b8fabf35c54c20089cb068389bbbd863_icedid_luca-stealer_njrat_stealc
- Size 1.9MB
- SHA256 ba2af54c3e1968bfc4b14fbf0b8c03421f01a8ceef8bea3b4c5bb7b71aa0336f
- MD5 b8fabf35c54c20089cb068389bbbd863
- SHA1 e0161848dec299432ab3aeba41ebf607bf1b7528
- SHA512 08879187ceaa3f01c5e46ac6df3cb4e7a0e32f7bd06aa44640d4a7447654e954e413aad768b1cd644877ebfbf4575888a638c07b965920862915de6ee91a6f15
- SSDEEP 24576:s42ypCOZbL0rVLv3dVD2F1rsCr8y8dO1dmK3BIJ8A2bJ5Q+:srsCOlorVL1VDGrT8c1iRIJ5Q
- TLSH
  T140951932E29C26ACD0A2D179EE869C52DA31748D03717FFB01915E921F9BDE04B7E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion
- Enumerates VirtualBox registry keys
  defense_evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Looks for Xen service registry key.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasion

behavioral2

defense_evasion

© 2018-2026

Terms | Privacy