General
- Target 2026-08-26_ed8d176a0ee91aac9ac1ada03ec08593_icedid_luca-stealer_njrat_stealc
- Size 24.0MB
- Sample260827-ehm9bsdk9s
- SHA256 f9fd9ef8a48bf8aa64ddd2fdf4f628c2c8600104fda0cd67bd317a22cc96dad2
- MD5 ed8d176a0ee91aac9ac1ada03ec08593
- SHA1 293d3f37ea90d8cff86c4e74a6d398b2b388cc1e
- SHA512 73d808c6b144ebf21e40a581362203b37f00924c162f01b6effa19319a1fe077e1a5fad78c48636219b7b9bf6b76344159c87f14b0a7c308c126fd82a761d391
- SSDEEP 393216:R4i43NxBYgrpFh723yQXROgn15UETxnjdwjWkv+vvRwkb2R+SWsc8WVuRtJVRRse:Ci43NxyMpn7uyYROw1FxnLkCwkqRnWVl
- TLSH T197472353F262BA80E87D83328DC19C0C1711F55EAE525E5F3629CAC1B113352BE79B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_ed8d176a0ee91aac9ac1ada03ec08593_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_ed8d176a0ee91aac9ac1ada03ec08593_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_ed8d176a0ee91aac9ac1ada03ec08593_icedid_luca-stealer_njrat_stealc
- Size 24.0MB
- SHA256 f9fd9ef8a48bf8aa64ddd2fdf4f628c2c8600104fda0cd67bd317a22cc96dad2
- MD5 ed8d176a0ee91aac9ac1ada03ec08593
- SHA1 293d3f37ea90d8cff86c4e74a6d398b2b388cc1e
- SHA512 73d808c6b144ebf21e40a581362203b37f00924c162f01b6effa19319a1fe077e1a5fad78c48636219b7b9bf6b76344159c87f14b0a7c308c126fd82a761d391
- SSDEEP 393216:R4i43NxBYgrpFh723yQXROgn15UETxnjdwjWkv+vvRwkb2R+SWsc8WVuRtJVRRse:Ci43NxyMpn7uyYROw1FxnLkCwkqRnWVl
- TLSH T197472353F262BA80E87D83328DC19C0C1711F55EAE525E5F3629CAC1B113352BE79B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Sets desktop wallpaper using registry