General
- Target 2026-08-15_db164a4608445957030f3cda62e18264_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 4.8MB
- Sample260815-dp4n8axfrf
- SHA256 4008158de8b030688b135838de12539343f3c27f468eec6f6a5875f1a79f451a
- MD5 db164a4608445957030f3cda62e18264
- SHA1 6381cb591101e7e8dcac7fa249f8d5830bb413f3
- SHA512 ddcc37bb21567432c2265a30162bf4058860689382d2ac5874f8eea9b924329c5bade78b2fa63342ce7958f1c7d3f23e3e4a08b31f01f63cd03b48086d326b74
- SSDEEP 98304:FfGDUO1WoOSDGiOjq2TEtoiPa4mcUrPRQL:FfGDXxEZTNs7UrPRQL
- TLSH T13336AF2962ED00A1E9A7E1798D179E0BCBB1B80103B4A3CF53E58E5D9F777610A7B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_db164a4608445957030f3cda62e18264_hijackloader_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_db164a4608445957030f3cda62e18264_hijackloader_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_db164a4608445957030f3cda62e18264_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 4.8MB
- SHA256 4008158de8b030688b135838de12539343f3c27f468eec6f6a5875f1a79f451a
- MD5 db164a4608445957030f3cda62e18264
- SHA1 6381cb591101e7e8dcac7fa249f8d5830bb413f3
- SHA512 ddcc37bb21567432c2265a30162bf4058860689382d2ac5874f8eea9b924329c5bade78b2fa63342ce7958f1c7d3f23e3e4a08b31f01f63cd03b48086d326b74
- SSDEEP 98304:FfGDUO1WoOSDGiOjq2TEtoiPa4mcUrPRQL:FfGDXxEZTNs7UrPRQL
- TLSH T13336AF2962ED00A1E9A7E1798D179E0BCBB1B80103B4A3CF53E58E5D9F777610A7B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext