Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
28/08/2026, 16:29
General
- Target 2026-08-28_55aeea18af742344a7d4a819b9193113_icedid_luca-stealer_njrat_stealc.exe
- Size 7.0MB
- Sample260828-tzqs4scl3s
- SHA256 f1d117ee7395fe05433281b05c19aeb1123e4af3d0bbe3a13d629102595c3b8c
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-28_55aeea18af742344a7d4a819b9193113_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-28_55aeea18af742344a7d4a819b9193113_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_5wzdafaj.r40.ps1
memory/4304-22-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-23-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-3-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-4-0x0000028131560000-0x0000028131568000-memory.dmp
memory/4304-5-0x0000028131580000-0x0000028131588000-memory.dmp
memory/4304-7-0x00000281315A0000-0x00000281315AA000-memory.dmp
memory/4304-8-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-6-0x0000028131560000-0x000002813156A000-memory.dmp
memory/4304-10-0x0000028133AC0000-0x0000028133AE2000-memory.dmp
memory/4304-9-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-11-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-12-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-14-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-13-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-15-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-16-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-17-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-0-0x00007FFC1245F000-0x00007FFC12460000-memory.dmp
memory/4304-19-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-20-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-2-0x000002814DAD0000-0x000002814E11A000-memory.dmp
memory/4304-21-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-18-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-24-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-25-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-26-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-27-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-28-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-29-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-30-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-31-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-32-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-33-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-34-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-35-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-36-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-39-0x000002814D7C0000-0x000002814D7DE000-memory.dmp
memory/4304-40-0x000002814D7E0000-0x000002814D892000-memory.dmp
memory/4304-41-0x000002814D8A0000-0x000002814D8AA000-memory.dmp
memory/4304-42-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-48-0x000002814D810000-0x000002814D82E000-memory.dmp
memory/4304-1-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp
memory/4304-57-0x00007FFC122D0000-0x00007FFC12C74000-memory.dmp