2026-08-20_d3baff81a3c4c518f6c9a69824ea5d28_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_d3baff81a3c4c518f6c9a69824ea5d28_icedid_luca-stealer_njrat_stealc
Size 10.8MB
Sample260820-ctl5asdn4x
SHA256 2759f45cd44d0f0ccb637335024236711b35f2cfa428de6d6619a24a3ff15f4a
MD5 d3baff81a3c4c518f6c9a69824ea5d28
SHA1 09f763f25b67410c5be051ebba879eade2fbc0e6
SHA512 738edb3e094f7f7df074c36be42b230351a582e80b9a95f4b2416cf159bb8c0c4fa3e8aea476aea392dfc2e3b038c10b5a2161227c22509a1929e38391c4d745
SSDEEP 98304:s6I3lM+3n/oMjOp09KXTqUJDVAEvvkp9F+a4X/5eoy2W4a3EbnPtzyi:sHlnX/H00UXTvJDV6HF+a4X/+2U3g1
TLSH
T176B69D758A9C9B4EF066B038C187521797F0BC0E1761DFCB9AC05DB74D2F588FA5A20A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_d3baff81a3c4c518f6c9a69824ea5d28_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-20_d3baff81a3c4c518f6c9a69824ea5d28_icedid_luca-stealer_njrat_stealc

.exe 10.8MB

2026-08-20_d3baff81a3c4c518f6c9a69824ea5d28_icedid_luca-stealer_njrat_stealc

IMPHASH 6f04ff261cc1c917cfd5efb9c6cd8c4c
SHA256 2759f45cd44d0f0ccb637335024236711b35f2cfa428de6d6619a24a3ff15f4a
MD5 d3baff81a3c4c518f6c9a69824ea5d28
SHA1 09f763f25b67410c5be051ebba879eade2fbc0e6
SHA512 738edb3e094f7f7df074c36be42b230351a582e80b9a95f4b2416cf159bb8c0c4fa3e8aea476aea392dfc2e3b038c10b5a2161227c22509a1929e38391c4d745
SSDEEP 98304:s6I3lM+3n/oMjOp09KXTqUJDVAEvvkp9F+a4X/5eoy2W4a3EbnPtzyi:sHlnX/H00UXTvJDV6HF+a4X/+2U3g1
TLSH
T176B69D758A9C9B4EF066B038C187521797F0BC0E1761DFCB9AC05DB74D2F588FA5A20A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8586804

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\Users\Admin\Documents\Project\Lana Del Rey\bin\Release\cold.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

dwmapi

DwmExtendFrameIntoClientArea

winhttp

WinHttpConnect WinHttpCloseHandle WinHttpOpenRequest WinHttpOpen WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpReadData WinHttpQueryHeaders WinHttpSetTimeouts WinHttpSendRequest

kernel32

GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect Sleep GetVolumeInformationA GetModuleHandleW GetComputerNameA OpenProcess CreateToolhelp32Snapshot MultiByteToWideChar Process32NextW Process32FirstW CloseHandle Module32FirstW ReadProcessMemory Module32NextW GetExitCodeProcess WideCharToMultiByte WriteProcessMemory GetTickCount64 QueryPerformanceFrequency QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock GlobalUnlock SetThreadPriority GetCurrentThread ReadFile WaitNamedPipeA WriteFile PeekNamedPipe GetEnvironmentVariableA CreateFileA GetTickCount LocalFree GetModuleHandleA GetLocaleInfoA LoadLibraryA GetProcAddress VerSetConditionMask FreeLibrary GetFileSizeEx HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType GetCommandLineW GetCommandLineA ExitProcess GetModuleFileNameW GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread EnumSystemLocalesW CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead GetCurrentProcessId IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW SleepConditionVariableSRW WakeAllConditionVariable LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetSystemTimeAsFileTime SetFilePointerEx GetConsoleMode GetACP GetOEMCP InitializeCriticalSectionEx ReadConsoleW GetFileInformationByHandleEx CopyFileW GetLastError AreFileApisANSI SetFileInformationByHandle IsValidCodePage GetConsoleOutputCP FlushFileBuffers GetTimeZoneInformation GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle HeapSize SetEndOfFile ExitThread WriteConsoleW FormatMessageA ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId WaitForSingleObjectEx GetExitCodeThread GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle

user32

GetClientRect EnumWindows GetAsyncKeyState IsWindowVisible GetWindow PeekMessageA UpdateWindow PostQuitMessage TranslateMessage PeekMessageW DispatchMessageW ShowWindow GetWindowThreadProcessId ClientToScreen RegisterClassExW GetMessageExtraInfo GetCapture TrackMouseEvent GetKeyboardLayout SetCapture SetProcessDPIAware IsWindowUnicode ReleaseCapture SetCursorPos GetClipboardData MapVirtualKeyW GetKeyNameTextW GetKeyState SendInput OpenClipboard CloseClipboard EmptyClipboard SetClipboardData GetWindowLongW SetWindowPos MonitorFromWindow ScreenToClient IsWindow GetMonitorInfoW UnregisterClassW SetWindowDisplayAffinity GetForegroundWindow SetLayeredWindowAttributes SetFocus LoadCursorW SetCursor SetWindowLongW EnumDisplaySettingsW FindWindowA SetForegroundWindow GetAncestor GetCursorPos DefWindowProcW GetWindowRect DestroyWindow CreateWindowExW GetSystemMetrics

shell32

ShellExecuteA

winmm

timeBeginPeriod timeEndPeriod

ws2_32

accept inet_pton select send socket recv setsockopt bind WSAStartup listen closesocket WSACleanup htons

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider BCryptHash

crypt32

CryptProtectData CryptUnprotectData

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

Name

.text

Size

8.4MB

Virtual Size

8.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

442KB

Virtual Size

441KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_d3baff81a3c4c518f6c9a69824ea5d28_icedid_luca-stealer_njrat_stealc

d3d11

d3dcompiler_43

d3dx11_43

dwmapi

winhttp

kernel32

user32

shell32

winmm

ws2_32

bcrypt

crypt32

imm32

generic