General
- Target 2026-08-30_fda8ecc4e9b093dc52bb150a8033812b_icedid_luca-stealer_njrat
- Size 1.4MB
- Sample260830-3yqldsbm4x
- SHA256 a043f81e35105833c59dda57e91a031b21acb26c483a9d72ce50d606095f652e
- MD5 fda8ecc4e9b093dc52bb150a8033812b
- SHA1 d30cdbd3b06ccaf5dbd5d9a688375a5aa7bdce0f
- SHA512 ff8e0168a7f99922ddbdf4829b18504474a4c4e284c5c31306e5a6ef3337d227dec10482829ce1b4061f3acc67a127b6b951fef543aee2ae512e2a65aed15900
- SSDEEP 12288:6HDmD+0wJ1BwM+dHOvEhxf48zz6I7m3DhYf6P5g06CpnxUV2RvTMFgF3nGK8nbW:6HDfaM+BRLQ8zb7mThYfQln82ZTpGq
- TLSH T12465F103B26D7CDDD066C235897145D2AB31FC302750A68F52F1BB662E376A3BD39A21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_fda8ecc4e9b093dc52bb150a8033812b_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_fda8ecc4e9b093dc52bb150a8033812b_icedid_luca-stealer_njrat
- Size 1.4MB
- SHA256 a043f81e35105833c59dda57e91a031b21acb26c483a9d72ce50d606095f652e
- MD5 fda8ecc4e9b093dc52bb150a8033812b
- SHA1 d30cdbd3b06ccaf5dbd5d9a688375a5aa7bdce0f
- SHA512 ff8e0168a7f99922ddbdf4829b18504474a4c4e284c5c31306e5a6ef3337d227dec10482829ce1b4061f3acc67a127b6b951fef543aee2ae512e2a65aed15900
- SSDEEP 12288:6HDmD+0wJ1BwM+dHOvEhxf48zz6I7m3DhYf6P5g06CpnxUV2RvTMFgF3nGK8nbW:6HDfaM+BRLQ8zb7mThYfQln82ZTpGq
- TLSH T12465F103B26D7CDDD066C235897145D2AB31FC302750A68F52F1BB662E376A3BD39A21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1