Analysis
- max time kernel
149s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/08/2026, 02:21
Behavioral task
behavioral1
Sample
2026-08-20_e3c5128e22c5757ef158060bbe9b863e_coinminer_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_e3c5128e22c5757ef158060bbe9b863e_coinminer_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-20_e3c5128e22c5757ef158060bbe9b863e_coinminer_icedid_luca-stealer_njrat.exe
- Size 40.2MB
- Sample260820-cs8xnsyblb
- SHA256 6b4890de8b79e5f3025c24d451be8140a4e5544d4ec141ed661fb86df6c3fd7e
- MD5 e3c5128e22c5757ef158060bbe9b863e
- SHA1 e8a666714b1a91830c304ef5885fa78d727c7284
- SHA512 664759b63fbe1f759eaf33b4137a1f702ef674b0e331ef41da2d2c4d31f08c412749af14142e41773bc3cd3274e761f461302cd23cb9cd2883931fbdbb260908
- SSDEEP 786432:c3CPxa13f/ZgMe3puiJlm/iCqjplEE/l23gwa5EPEaSWZ7dcAuU2i0x8z5RmwdDg:+5f/c3x4KC7JP8WZ7dcAV0Cz5Bd
- TLSH T1C79733BE3654732CC01E88354133AD04F2F1656E47B4D6DB76DABA803F6B9D09932B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables packed with VMProtect. 2 IoCs
resource yara_rule behavioral1/memory/1432-0-0x00007FF615710000-0x00007FF617F7B000-memory.dmp INDICATOR_EXE_Packed_VMProtect behavioral1/memory/1432-1-0x00007FF615710000-0x00007FF617F7B000-memory.dmp INDICATOR_EXE_Packed_VMProtect -
resource yara_rule behavioral1/memory/1432-0-0x00007FF615710000-0x00007FF617F7B000-memory.dmp vmprotect behavioral1/memory/1432-1-0x00007FF615710000-0x00007FF617F7B000-memory.dmp vmprotect