2026-08-19_bcc4651ec1777fb0d4b0105c965cfbe0_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_bcc4651ec1777fb0d4b0105c965cfbe0_icedid_luca-stealer_njrat_stealc
Size 2.6MB
Sample260819-e6b6zayvaz
SHA256 1b51667c10808c41727aabf4d91237476675d4b5af4cc8996ea6ec15b796472c
MD5 bcc4651ec1777fb0d4b0105c965cfbe0
SHA1 259746c18e3534a15e724ecbbcc69b957cefc90f
SHA512 e34e02be1286de8ca5f4e61c85b371676873609fc04adc1cdab057e92cd9d2d834da72913f0385db9263377b37c8c853fe83607844ca0b5f41210e9f5a737af0
SSDEEP 49152:ITtkUHygxVjGFGodnmucL/+qkHiQdPUsjPhHjawgVpmL:IVUXcL/+rVUstjMU
TLSH
T1EBC5E121F3A542DCC566A474DA529F07F3317C440B219BDB63F92A941FA7AE00EBE781
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_bcc4651ec1777fb0d4b0105c965cfbe0_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-19_bcc4651ec1777fb0d4b0105c965cfbe0_icedid_luca-stealer_njrat_stealc

.exe 2.6MB

2026-08-19_bcc4651ec1777fb0d4b0105c965cfbe0_icedid_luca-stealer_njrat_stealc

IMPHASH cc4d9428d2768f18f40e3d9482735937
SHA256 1b51667c10808c41727aabf4d91237476675d4b5af4cc8996ea6ec15b796472c
MD5 bcc4651ec1777fb0d4b0105c965cfbe0
SHA1 259746c18e3534a15e724ecbbcc69b957cefc90f
SHA512 e34e02be1286de8ca5f4e61c85b371676873609fc04adc1cdab057e92cd9d2d834da72913f0385db9263377b37c8c853fe83607844ca0b5f41210e9f5a737af0
SSDEEP 49152:ITtkUHygxVjGFGodnmucL/+qkHiQdPUsjPhHjawgVpmL:IVUXcL/+rVUstjMU
TLSH
T1EBC5E121F3A542DCC566A474DA529F07F3317C440B219BDB63F92A941FA7AE00EBE781
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

688140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\kaant\OneDrive\Desktop\Torun Cheats Fivem\Build\Verification\Torun Cheats.pdb

ntdll

RtlCaptureContext RtlPcToFileHeader RtlVirtualUnwind RtlUnwindEx RtlLookupFunctionEntry ZwReadVirtualMemory RtlUnwind

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

kernel32

WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter Process32First WriteProcessMemory SetConsoleTextAttribute SetConsoleTitleA GetStdHandle GetModuleFileNameW Module32Next SetThreadPriority Module32First OpenProcess CreateToolhelp32Snapshot Sleep GetConsoleMode QueryFullProcessImageNameA GetCurrentThread Process32Next CloseHandle K32GetModuleBaseNameA FreeConsole K32GetModuleInformation VirtualAllocEx ReadProcessMemory FlushInstructionCache K32EnumProcessModules VirtualFreeEx AllocConsole VirtualQueryEx SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GlobalLock GetFileSizeEx GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetFileType ReadConsoleW SetFilePointerEx GetCommandLineW GetCommandLineA WriteFile FreeLibraryAndExitThread ExitThread CreateThread GetModuleHandleExW ExitProcess ReadFile LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError GlobalFree GlobalAlloc MultiByteToWideChar GetProcessHeap SetStdHandle HeapReAlloc HeapSize SetEndOfFile GetTimeZoneInformation GetStartupInfoW RaiseException GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent EnterCriticalSection GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetLastError GetFileInformationByHandleEx LocalFree FormatMessageA GetLocaleInfoEx ReleaseSRWLockShared AcquireSRWLockShared TryAcquireSRWLockExclusive WaitForSingleObjectEx GetExitCodeThread InitializeCriticalSectionEx WriteConsoleW

user32

EmptyClipboard CloseClipboard SetClipboardData GetCursorPos SetCursorPos ReleaseCapture GetClipboardData OpenClipboard IsWindowUnicode DispatchMessageA DestroyWindow SetWindowPos GetSystemMetrics ShowWindow GetAsyncKeyState SetWindowLongA SetWindowDisplayAffinity DefWindowProcA CreateWindowExA SetLayeredWindowAttributes TranslateMessage mouse_event PeekMessageA UnregisterClassA PostQuitMessage SetWindowLongPtrA FindWindowA RegisterClassExA UpdateWindow GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect

shell32

ShellExecuteW

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

Name

.text

Size

903KB

Virtual Size

902KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

420KB

Virtual Size

420KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_bcc4651ec1777fb0d4b0105c965cfbe0_icedid_luca-stealer_njrat_stealc

ntdll

d3d11

d3dx11_43

kernel32

user32

shell32

imm32

d3dcompiler_43

dwmapi

generic