2026-08-23_b1c2b53c9076b2a2db89b998b75888f0_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-23_b1c2b53c9076b2a2db89b998b75888f0_icedid_luca-stealer_njrat_stealc
Size 1.1MB
Sample260824-bb35esbr6s
SHA256 9fd5af03a7b9eb099b1c113179c490c0ebc4ffc659656fde9bd351c788f7c10f
MD5 b1c2b53c9076b2a2db89b998b75888f0
SHA1 649cd952cb23dd5526efe333dbbbe8d53cc1b5be
SHA512 83e33ecea41a0a239da076fc9cbd0f88656c040bd0972073c51680a057c6f23f5d57579c2a379a8e7131d66baf2b5f807c7afa808d8a7580e866d0cd9ce1847b
SSDEEP 24576:DU/sw+WjpppeXj3//Yd4vwriinyMT4YQ/ElIbg:DUUwXTkT/YPWinxsYQs
TLSH
T10D45AF16A2B801FCD0BBC078CA569917E672384807709AEF17E05A552F77BE05BBF712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_b1c2b53c9076b2a2db89b998b75888f0_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-23_b1c2b53c9076b2a2db89b998b75888f0_icedid_luca-stealer_njrat_stealc

.exe 1.1MB

2026-08-23_b1c2b53c9076b2a2db89b998b75888f0_icedid_luca-stealer_njrat_stealc

IMPHASH 61a7272da71acf1602a993b63fd9d83d
SHA256 9fd5af03a7b9eb099b1c113179c490c0ebc4ffc659656fde9bd351c788f7c10f
MD5 b1c2b53c9076b2a2db89b998b75888f0
SHA1 649cd952cb23dd5526efe333dbbbe8d53cc1b5be
SHA512 83e33ecea41a0a239da076fc9cbd0f88656c040bd0972073c51680a057c6f23f5d57579c2a379a8e7131d66baf2b5f807c7afa808d8a7580e866d0cd9ce1847b
SSDEEP 24576:DU/sw+WjpppeXj3//Yd4vwriinyMT4YQ/ElIbg:DUUwXTkT/YPWinxsYQs
TLSH
T10D45AF16A2B801FCD0BBC078CA569917E672384807709AEF17E05A552F77BE05BBF712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

619676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

EventRegister EventUnregister EventSetInformation EventWriteTransfer OpenProcessToken GetTokenInformation ChangeServiceConfigW CloseServiceHandle CreateServiceW OpenSCManagerW OpenServiceW QueryServiceConfigW QueryServiceStatusEx StartServiceW AdjustTokenPrivileges LookupPrivilegeValueW

shell32

ShellExecuteA CommandLineToArgvW

bcrypt

BCryptCreateHash BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptHashData BCryptFinishHash BCryptDestroyHash

d3d11

D3D11CreateDevice

dcomp

DCompositionCreateDevice

kernel32

HeapReAlloc CloseHandle OpenProcess GetSystemInfo VirtualQueryEx GetCommandLineW CreateFileW GetLastError CreateMutexW GetCurrentProcessId GetSystemTime GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW LocalFree WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW GetModuleHandleW GetProcAddress LoadLibraryW DeleteFileW Sleep GetCurrentProcess GetTickCount64 GetSystemDirectoryW FormatMessageW MoveFileExW DeviceIoControl QueryPerformanceCounter VirtualAlloc VirtualFree GetProcessTimes GetActiveProcessorCount K32GetProcessMemoryInfo FormatMessageA GetWindowsDirectoryA QueryPerformanceFrequency FreeLibrary LoadLibraryA MultiByteToWideChar GetLocaleInfoA WriteConsoleW GlobalUnlock GlobalLock GlobalFree ReadConsoleW SetFilePointerEx GetFileSizeEx IsValidCodePage GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc ExitProcess WriteFile GetStdHandle ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread GetFileType SetStdHandle DuplicateHandle LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx RaiseException RtlPcToFileHeader GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent TerminateProcess GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStringTypeW RtlUnwind LCMapStringEx DecodePointer EncodePointer FreeEnvironmentStringsW GetProcessHeap GetConsoleMode HeapSize SetEndOfFile GlobalAlloc ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW GetCurrentThreadId GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx WaitForSingleObjectEx GetExitCodeThread WakeConditionVariable WakeAllConditionVariable InitializeCriticalSectionEx GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection

user32

IsWindowVisible BringWindowToTop GetSystemMetrics GetClientRect MessageBoxW EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard ScreenToClient GetCursorPos SetCursor SetCursorPos GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout LoadCursorW SetWindowLongPtrW GetWindowLongPtrW AdjustWindowRect SetForegroundWindow UpdateWindow GetAsyncKeyState ClientToScreen SetWindowPos SetLayeredWindowAttributes ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW PeekMessageW DispatchMessageW TranslateMessage SetProcessDpiAwarenessContext GetWindow GetWindowThreadProcessId EnumWindows

ntdll

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext NtQuerySystemInformation

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

Name

.text

Size

844KB

Virtual Size

844KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

199KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_b1c2b53c9076b2a2db89b998b75888f0_icedid_luca-stealer_njrat_stealc

advapi32

shell32

bcrypt

d3d11

dcomp

kernel32

user32

ntdll

imm32

d3dcompiler_47

generic