General
- Target 2026-08-25_7cedf0cd502e79e3906818c64646d49b_icedid_luca-stealer_njrat_ryuk_stealc
- Size 1.5MB
- Sample260826-yxncesfb65
- SHA256 1ef53a1bb4cf1d7bad885bde7141f9275948ad647803ced848a3fa64b5ff6159
- MD5 7cedf0cd502e79e3906818c64646d49b
- SHA1 4a41260e587f77bab0b8155c16a1a2a34026a334
- SHA512 53e564cd750c98b5e23220a2acf073f7f74c053930ebf18eb0b499988403e1af4116ef891595baa94f63d89d8fef4bdb9b19fbb64048ec06db78745dfbdbfaf3
- SSDEEP 24576:VhTbUlDMWwGpS3d85EOnQSLs+kAgTBeHYzEaR8nrm/B6gca7qf+usx:f0ZwGpSy5EOnQS3k/T4HdzJ3
- TLSH T112653B2ED6F269C0D4BECCF76D8329658C913F95013C324EDAB0F26245710E269DADA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_7cedf0cd502e79e3906818c64646d49b_icedid_luca-stealer_njrat_ryuk_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Attributes
-
encryption_key
5FBB1ABBA265E96424BBC58693B972DEE808A768
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target 2026-08-25_7cedf0cd502e79e3906818c64646d49b_icedid_luca-stealer_njrat_ryuk_stealc
- Size 1.5MB
- SHA256 1ef53a1bb4cf1d7bad885bde7141f9275948ad647803ced848a3fa64b5ff6159
- MD5 7cedf0cd502e79e3906818c64646d49b
- SHA1 4a41260e587f77bab0b8155c16a1a2a34026a334
- SHA512 53e564cd750c98b5e23220a2acf073f7f74c053930ebf18eb0b499988403e1af4116ef891595baa94f63d89d8fef4bdb9b19fbb64048ec06db78745dfbdbfaf3
- SSDEEP 24576:VhTbUlDMWwGpS3d85EOnQSLs+kAgTBeHYzEaR8nrm/B6gca7qf+usx:f0ZwGpSy5EOnQS3k/T4HdzJ3
- TLSH T112653B2ED6F269C0D4BECCF76D8329658C913F95013C324EDAB0F26245710E269DADA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Quasar payload
-
Detects Windows executables referencing non-Windows User-Agents