2026-08-20_88bcf5aab47e8ba0ba64f25c2406ba33_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_88bcf5aab47e8ba0ba64f25c2406ba33_icedid_luca-stealer_njrat_stealc
Size 5.7MB
Sample260820-pgp2msbr6s
SHA256 09d562838a75b503b609b5e96d178ae356cac57607e387e8e474578baf7ebf04
MD5 88bcf5aab47e8ba0ba64f25c2406ba33
SHA1 a59bf50d2834a810c6d8756eef77d09cfb8ab16c
SHA512 607f739f6fcc36af770b4ea640d910b175640a930f0826b6e3e1d6075839e254e25da8dd86be57b50f4243aa669f250c3501243d898012869666de69e03abc29
SSDEEP 98304:Jtp8rwdbFrSLN0dSJKeKbWnvVTnPo4RwRj0BN7ySSbL3sUiy3viOQ:JvHZGRQSJPegtfSjSRZwh
TLSH
T192562346B2F401FCE07B9D79C98A9A07EB757818036059DF13D409952FA77E09BBA313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_88bcf5aab47e8ba0ba64f25c2406ba33_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-20_88bcf5aab47e8ba0ba64f25c2406ba33_icedid_luca-stealer_njrat_stealc

.exe 5.7MB

2026-08-20_88bcf5aab47e8ba0ba64f25c2406ba33_icedid_luca-stealer_njrat_stealc

IMPHASH 6d09ec86dd87df8b1b994b0b13e458cc
SHA256 09d562838a75b503b609b5e96d178ae356cac57607e387e8e474578baf7ebf04
MD5 88bcf5aab47e8ba0ba64f25c2406ba33
SHA1 a59bf50d2834a810c6d8756eef77d09cfb8ab16c
SHA512 607f739f6fcc36af770b4ea640d910b175640a930f0826b6e3e1d6075839e254e25da8dd86be57b50f4243aa669f250c3501243d898012869666de69e03abc29
SSDEEP 98304:Jtp8rwdbFrSLN0dSJKeKbWnvVTnPo4RwRj0BN7ySSbL3sUiy3viOQ:JvHZGRQSJPegtfSjSRZwh
TLSH
T192562346B2F401FCE07B9D79C98A9A07EB757818036059DF13D409952FA77E09BBA313
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

536156

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcrypt

BCryptCreateHash BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptGenRandom BCryptDestroyKey BCryptDecrypt BCryptEncrypt BCryptGenerateSymmetricKey BCryptSetProperty

d3d11

D3D11CreateDeviceAndSwapChain

user32

DefWindowProcW PeekMessageA DispatchMessageA ReleaseCapture PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW DestroyWindow ShowWindow UpdateWindow LoadIconW OpenClipboard CloseClipboard SetClipboardData GetClipboardData EnumDisplayMonitors GetMonitorInfoA MonitorFromWindow LoadCursorA SetWindowLongPtrA SetWindowLongW SetWindowLongA GetWindowLongW WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetClientRect GetPropA SetPropA ReleaseDC GetDC SetForegroundWindow GetForegroundWindow IsWindowUnicode EmptyClipboard SetCapture GetCapture GetKeyState SetFocus BringWindowToTop IsIconic SetWindowPos SetLayeredWindowAttributes IsChild GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout TranslateMessage

gdi32

GetDeviceCaps

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetTimeouts WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders

kernel32

IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType HeapAlloc HeapFree GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError RtlUnwindEx RaiseException RtlPcToFileHeader InitializeSListHead GetStartupInfoW GetACP GetOEMCP GetCPInfo GetCommandLineA IsDebuggerPresent IsProcessorFeaturePresent GetCurrentProcess SetUnhandledExceptionFilter GetCommandLineW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetEnvironmentVariableA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileW GetFileAttributesA GetFileSizeEx ReadFile WriteFile GetTempPathW CloseHandle GetLastError WaitForSingleObject Sleep GetCurrentProcessId CreateRemoteThread GetExitCodeThread OpenProcess GetTickCount GetTickCount64 VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW GetEnvironmentVariableW GetFileAttributesW ExitProcess GetModuleFileNameW MoveFileExW SystemTimeToFileTime GetVolumeInformationA LocalFree OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary LoadLibraryA GetLocaleInfoA IsDBCSLeadByte SetStdHandle GetStringTypeW HeapSize HeapReAlloc SetEndOfFile WriteConsoleW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW UnhandledExceptionFilter GetProcessHeap TerminateProcess GetModuleHandleA GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeCriticalSectionEx GetSystemTimeAsFileTime

shell32

ShellExecuteW SHGetFolderPathW

advapi32

RegGetValueA RegGetValueW

crypt32

CryptProtectData CryptUnprotectData

imm32

ImmSetCandidateWindow ImmGetContext ImmReleaseContext ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

Name

.text

Size

688KB

Virtual Size

688KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_88bcf5aab47e8ba0ba64f25c2406ba33_icedid_luca-stealer_njrat_stealc

bcrypt

d3d11

user32

gdi32

winhttp

kernel32

shell32

advapi32

crypt32

imm32

d3dcompiler_47

generic