General
- Target 2026-08-18_207de7e9dc0c9e9b3c847e1408064a57_icedid_luca-stealer_njrat
- Size 65.4MB
- Sample260818-1bpdpsbe85
- SHA256 d03324b32ccc786f9dbb2c7fbcff8219fcef0e60b655aac5b80bcfca7ca90d88
- MD5 207de7e9dc0c9e9b3c847e1408064a57
- SHA1 130baef2f7e69f9e23414fe44d322745df881aaf
- SHA512 470d40cfab267bcfb4e213d5c5cb2f6741e2d0f111abe5f7043ab3c9f958a23131978244b168c7a4198d0be7d70044b83aedac060e7dc3069799aa29a0be1854
- SSDEEP 786432:WFEgqKkvwC3G2+PcIhcQ2pimDiX6q0+l40cQR5MMMgnw+DaqfkQ:WsKkvRW2M1hL2Ymf+lNcQYFgwz3Q
- TLSH T104E78689D7453E826025F5DAE01F224B4D8CFA884F5B01C2EBB64EA71D1E074D3DBB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_207de7e9dc0c9e9b3c847e1408064a57_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_207de7e9dc0c9e9b3c847e1408064a57_icedid_luca-stealer_njrat
- Size 65.4MB
- SHA256 d03324b32ccc786f9dbb2c7fbcff8219fcef0e60b655aac5b80bcfca7ca90d88
- MD5 207de7e9dc0c9e9b3c847e1408064a57
- SHA1 130baef2f7e69f9e23414fe44d322745df881aaf
- SHA512 470d40cfab267bcfb4e213d5c5cb2f6741e2d0f111abe5f7043ab3c9f958a23131978244b168c7a4198d0be7d70044b83aedac060e7dc3069799aa29a0be1854
- SSDEEP 786432:WFEgqKkvwC3G2+PcIhcQ2pimDiX6q0+l40cQR5MMMgnw+DaqfkQ:WsKkvRW2M1hL2Ymf+lNcQYFgwz3Q
- TLSH T104E78689D7453E826025F5DAE01F224B4D8CFA884F5B01C2EBB64EA71D1E074D3DBB66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE