2026-08-14_46cbdee832d798b3ea87ea1210c47e65_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_46cbdee832d798b3ea87ea1210c47e65_icedid_luca-stealer_njrat_stealc
Size 7.0MB
Sample260814-e8bm8afc47
SHA256 77bd59642282cc6f759b0593e0ca51a1d9c99c6bd1844ab388c228b2c3b0c8a9
MD5 46cbdee832d798b3ea87ea1210c47e65
SHA1 8dd08de2bfc378de7c89f39fff48a53bce4f6303
SHA512 99a458e5efc969c895c52d8075344bb70dab607c319f3fda7a41c33e30be3b1581d5005be7e686621a16dc5fb0b559188caea1ea04ca236997360b827489c58e
SSDEEP 49152:v5DcoRFnQHDBDeLwE8cy4y3VkT8+HE3uxuMvAKrTZrNyA+2dWhT8p5Q1itwncdTU:bMBjVMxdAGTZ3boN6gkfk/bpI6G4QqL
TLSH
T19B76F10AD3A7DA98DF63AB398811A563D9F07CC99734D2CB66CD4D15BE27AB0487C700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_46cbdee832d798b3ea87ea1210c47e65_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-14_46cbdee832d798b3ea87ea1210c47e65_icedid_luca-stealer_njrat_stealc

.exe 7.0MB

2026-08-14_46cbdee832d798b3ea87ea1210c47e65_icedid_luca-stealer_njrat_stealc

IMPHASH 0d3a796b2f6d9a5546df6549e00372f2
SHA256 77bd59642282cc6f759b0593e0ca51a1d9c99c6bd1844ab388c228b2c3b0c8a9
MD5 46cbdee832d798b3ea87ea1210c47e65
SHA1 8dd08de2bfc378de7c89f39fff48a53bce4f6303
SHA512 99a458e5efc969c895c52d8075344bb70dab607c319f3fda7a41c33e30be3b1581d5005be7e686621a16dc5fb0b559188caea1ea04ca236997360b827489c58e
SSDEEP 49152:v5DcoRFnQHDBDeLwE8cy4y3VkT8+HE3uxuMvAKrTZrNyA+2dWhT8p5Q1itwncdTU:bMBjVMxdAGTZ3boN6gkfk/bpI6G4QqL
TLSH
T19B76F10AD3A7DA98DF63AB398811A563D9F07CC99734D2CB66CD4D15BE27AB0487C700
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

624144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

kernel32

CreateFileA LoadLibraryA DeleteFileA Process32FirstW CloseHandle Module32FirstW VirtualProtectEx GetProcAddress VirtualAllocEx ExitProcess GetCurrentProcessId FreeLibrary CreateRemoteThread Module32NextW VirtualFreeEx SetUnhandledExceptionFilter K32GetModuleInformation FindFirstFileA FindNextFileA FindClose GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA QueryPerformanceFrequency QueryPerformanceCounter GetVolumeInformationA GetTickCount GetModuleHandleW GetExitCodeProcess SetFileAttributesA GetLocalTime SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW Process32NextW GetCommandLineA GetOEMCP GetACP IsValidCodePage DeleteFileW ReadConsoleW SetFilePointerEx GetFileSizeEx HeapReAlloc GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetStdHandle GetModuleFileNameW ReadFile GetModuleHandleExW FreeLibraryAndExitThread GetTempPathA Sleep MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess GetModuleHandleA ExitThread GetCurrentThreadId WaitForSingleObject ExpandEnvironmentStringsA WriteFile WriteProcessMemory CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount HeapSize SetEndOfFile WriteConsoleW GetCommandLineW ReleaseSRWLockExclusive SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx TerminateProcess GetCurrentProcess InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlUnwind AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW FormatMessageA LocalFree GetLocaleInfoEx CreateDirectoryW CreateFileW FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetLastError GetFileInformationByHandleEx InitializeCriticalSectionEx GetSystemTimeAsFileTime WakeAllConditionVariable LCMapStringEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW RtlCaptureContext

user32

CloseClipboard OpenClipboard GetCursorPos SetCursorPos GetClipboardData SetClipboardData TranslateMessage MessageBoxA SetWindowDisplayAffinity PeekMessageW DispatchMessageW GetAsyncKeyState GetWindowLongPtrW SetWindowLongPtrW EmptyClipboard GetClientRect ReleaseCapture DefWindowProcW CreateWindowExW MapWindowPoints MoveWindow SetWindowLongW SetForegroundWindow GetKeyState GetMessageExtraInfo IsWindowUnicode ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor SetWindowPos

comdlg32

CommDlgExtendedError GetOpenFileNameA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey GetUserNameA

shell32

ShellExecuteW SHGetFolderPathA

ole32

CoInitializeEx CoCreateInstance CoUninitialize

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

winhttp

WinHttpConnect WinHttpSendRequest WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpReceiveResponse

Name

.text

Size

798KB

Virtual Size

797KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3.5MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_46cbdee832d798b3ea87ea1210c47e65_icedid_luca-stealer_njrat_stealc

d3dx11_43

d3d11

d3dcompiler_47

kernel32

user32

comdlg32

advapi32

shell32

ole32

imm32

dwmapi

winhttp

generic