General
- Target 2026-08-19_8745f8f4b67af39ed40ea8c11d39aee1_elex_icedid_luca-stealer_njrat_stealc_vidar
- Size 8.2MB
- Sample260819-xafhmattf1
- SHA256 66055c8d5fda7093ab666a391752ae6c24a454e1ac18780663ac3013d047c1d8
- MD5 8745f8f4b67af39ed40ea8c11d39aee1
- SHA1 0774283a136761cacfe328f7d0f336977ea18c11
- SHA512 84cbc51b48acbfcca583468db1bdaa789a59c7cdbe8ac8a45d3a1237ebeb9f5399175fdbfb626761144bc1f52a7bc9ba044d2ce6f9ef5ac3efecade626f9b1db
- SSDEEP 98304:15/pQLVlQqYkQkajMQiKLpUSZzi40sjysHjovgzpXM0hXTPOq1GcEgHhMjmyTDNp:1JynqkQwQiCi40sjNHjagze41IuOjfN
- TLSH T1DF86CF5BB36800E8D17BD03986576A07E272344A133057EF63A546512FBBBE0BABF705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_8745f8f4b67af39ed40ea8c11d39aee1_elex_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_8745f8f4b67af39ed40ea8c11d39aee1_elex_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_8745f8f4b67af39ed40ea8c11d39aee1_elex_icedid_luca-stealer_njrat_stealc_vidar
- Size 8.2MB
- SHA256 66055c8d5fda7093ab666a391752ae6c24a454e1ac18780663ac3013d047c1d8
- MD5 8745f8f4b67af39ed40ea8c11d39aee1
- SHA1 0774283a136761cacfe328f7d0f336977ea18c11
- SHA512 84cbc51b48acbfcca583468db1bdaa789a59c7cdbe8ac8a45d3a1237ebeb9f5399175fdbfb626761144bc1f52a7bc9ba044d2ce6f9ef5ac3efecade626f9b1db
- SSDEEP 98304:15/pQLVlQqYkQkajMQiKLpUSZzi40sjysHjovgzpXM0hXTPOq1GcEgHhMjmyTDNp:1JynqkQwQiCi40sjNHjagze41IuOjfN
- TLSH T1DF86CF5BB36800E8D17BD03986576A07E272344A133057EF63A546512FBBBE0BABF705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.