Analysis
- max time kernel
150s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/08/2026, 17:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe
- Size 5.2MB
- Sample260817-v2bmmseq2y
- SHA256 6c8d19f9d0757823d8cd980083cf1ed941be58a00e6279c346eed6748fb00eec
- MD5 f7ee5b8d391cf3a7e74095fe4dafc02d
- SHA1 2b55777d6386ef381b7d1759df4bdb50d5a1be5e
- SHA512 ef0444976149bcf513ff346620c3ec4302c030507a07fd8e526d1a9ab8a4f71a3b46de068fbbaa3ace141000e9aa2d52a261c8ab5507b9621f0e7441dc95e7f6
- SSDEEP 98304:sBuFMS7zW0XPffmLj7SKlUha8JLd0mPiWoV9Az8D:sTSHW0X+Lj5lMLd0OoV9Az8D
- TLSH T1DA461245659082BEC02AD778C6615CBEF22B7D889E30894FAF85BD496F377D0C935B08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 2008 ~fp01dd2e6df82fc2c7.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5916 wrote to memory of 2008 5916 2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-17_f7ee5b8d391cf3a7e74095fe4dafc02d_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5916 -
C:\Users\Admin\AppData\Local\~fp01dd2e6df82fc2c7\~fp01dd2e6df82fc2c7.exe"C:\Users\Admin\AppData\Local\~fp01dd2e6df82fc2c7\~fp01dd2e6df82fc2c7.exe"2⤵
- Executes dropped EXE
PID:2008
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\~fp01dd2e6df82fc2c7\~fp01dd2e6df82fc2c7.exe
- Size 3.4MB
- SHA256 7e621983287ece523826ab8fce8165a53778170f079b032b75ec8cf03983c6e3
- MD5 a88b3343f4957d0cf5ed15d412e3b941
- SHA1 1e9704fb545a6ebbbffb59169483d47a628a5689
- SHA512 0838e1aa40d1d16b59a180ccc2d8e5ef02c5403e0f2341cb29a4ba6aa07ff8023a7414c88c4cb3e3eaba0569e038acccdf78d2229e8a8dfe3820dedd6aa27635
- SSDEEP 49152:L9jo7Zb9eV16Emzp392T4Ienb4uPpCsbuKM9ig15j7A/WmmV0gYWwG6+uhTW8JF:LuFMS7zW0XPffmLj7SKlUha8J
- TLSH T11AF5128565D181BEC01EC7B1C6196CBDF26BBE899C34890F6F46BA452F727A0C971E0C
- MD5 SHA1 SHA512 SSDEEP TLSH