General
- Target 2026-08-17_0f0408b3bd49fef89e95bc15b579e6e7_icedid_luca-stealer_njrat
- Size 1.9MB
- Sample260818-a5dwyscj2z
- SHA256 080d6394eb76c8ddc861a347fa1b58f648ae7c7165db23a1a59e8f594ca15ad5
- MD5 0f0408b3bd49fef89e95bc15b579e6e7
- SHA1 7de5b163d53b39916ea8b92d92dddcc029d4e92c
- SHA512 0530f2a821128bf21a7b9b5820506d90baf6ceeac55879d925e772a252bf424ec8e40db6a2e85240150a86ff76e061e9876a5d69e041bf3e9f763b36e840331f
- SSDEEP 49152:r/IXzFFzl45XBfop8wxszR7XMLufGtnUHNVOXjy:85745dop8wmzR7XqufGzzy
- TLSH T12195791ED1DC279ED319BA7928270C05BE15CC17E2A4EC1975FA86312B611C487ECEFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_0f0408b3bd49fef89e95bc15b579e6e7_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_0f0408b3bd49fef89e95bc15b579e6e7_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_0f0408b3bd49fef89e95bc15b579e6e7_icedid_luca-stealer_njrat
- Size 1.9MB
- SHA256 080d6394eb76c8ddc861a347fa1b58f648ae7c7165db23a1a59e8f594ca15ad5
- MD5 0f0408b3bd49fef89e95bc15b579e6e7
- SHA1 7de5b163d53b39916ea8b92d92dddcc029d4e92c
- SHA512 0530f2a821128bf21a7b9b5820506d90baf6ceeac55879d925e772a252bf424ec8e40db6a2e85240150a86ff76e061e9876a5d69e041bf3e9f763b36e840331f
- SSDEEP 49152:r/IXzFFzl45XBfop8wxszR7XMLufGtnUHNVOXjy:85745dop8wmzR7XqufGzzy
- TLSH T12195791ED1DC279ED319BA7928270C05BE15CC17E2A4EC1975FA86312B611C487ECEFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger