General
- Target 2026-08-20_9c58313c9829b9073f3e74a58714e6a6_icedid_luca-stealer_njrat
- Size 65.4MB
- Sample260820-v1ctbasbpa
- SHA256 56a2585b4c4334ce7c15ee1c163ac2e3e2bd736292bee4b3aca58333b19e3588
- MD5 9c58313c9829b9073f3e74a58714e6a6
- SHA1 0a10a6baf5cf7def8a03af3bfb5d1ed7e1d8f30c
- SHA512 69f886dbf09ee17df465e76001900ca98adc96e6a29c7434225546dd1b9aa2c72598fa7881899a900225f3510e874082f30eab42e9c66939b6b9df538e2b5f2e
- SSDEEP 786432:/7609KX3xj7A1JJlvFbK63EvcE3ifT626n2//JNWxSp2S:/7peBcZlvtKMNE3qA2//JNWkp2S
- TLSH T15BE7D64E45399FE61C98F5AFB93CA222916DA3D238426CCD2148D973BF3C8739136D16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_9c58313c9829b9073f3e74a58714e6a6_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9c58313c9829b9073f3e74a58714e6a6_icedid_luca-stealer_njrat
- Size 65.4MB
- SHA256 56a2585b4c4334ce7c15ee1c163ac2e3e2bd736292bee4b3aca58333b19e3588
- MD5 9c58313c9829b9073f3e74a58714e6a6
- SHA1 0a10a6baf5cf7def8a03af3bfb5d1ed7e1d8f30c
- SHA512 69f886dbf09ee17df465e76001900ca98adc96e6a29c7434225546dd1b9aa2c72598fa7881899a900225f3510e874082f30eab42e9c66939b6b9df538e2b5f2e
- SSDEEP 786432:/7609KX3xj7A1JJlvFbK63EvcE3ifT626n2//JNWxSp2S:/7peBcZlvtKMNE3qA2//JNWkp2S
- TLSH T15BE7D64E45399FE61C98F5AFB93CA222916DA3D238426CCD2148D973BF3C8739136D16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE