2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc
Size 14.1MB
Sample260905-d2wjdawcle
SHA256 d98c466cfeef29a2a4100e4874ba99fa6885065ae6a0be35f5c0c48a559f1e39
MD5 9104510221c2f1638c69bef694749209
SHA1 da89c91dd465f1ca03cbb8e42b84bedf4257a6d8
SHA512 c0df983d104a470b31e4477a05b51e57b016b7e2627c013439f43a4c1c9af73371fcd5d5abd7d70eb64ce0c8a240966271fbebbdd0cc572d2b45dd67678f7e55
SSDEEP 393216:ABx4cFvi6SD/KlKxuWuGwyecY4r/RL49Lv:AIAg+KxXfw3clr5G
TLSH
T1C8E62207E2D1E6F9FA278A384961AB079377B016073107DF52E17274EE972E02E79742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc

File Explorer

2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc

.exe 14.1MB

2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc

IMPHASH a5ed1bdd1d9a02d2b5595bdb3524b483
SHA256 d98c466cfeef29a2a4100e4874ba99fa6885065ae6a0be35f5c0c48a559f1e39
MD5 9104510221c2f1638c69bef694749209
SHA1 da89c91dd465f1ca03cbb8e42b84bedf4257a6d8
SHA512 c0df983d104a470b31e4477a05b51e57b016b7e2627c013439f43a4c1c9af73371fcd5d5abd7d70eb64ce0c8a240966271fbebbdd0cc572d2b45dd67678f7e55
SSDEEP 393216:ABx4cFvi6SD/KlKxuWuGwyecY4r/RL49Lv:AIAg+KxXfw3clr5G
TLSH
T1C8E62207E2D1E6F9FA278A384961AB079377B016073107DF52E17274EE972E02E79742
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

520760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmSetWindowAttribute

ole32

CoUninitialize CoCreateInstance CoInitializeEx

user32

GetMessageExtraInfo SendInput GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData wsprintfW DefWindowProcW GetKeyState PostMessageW SetProcessDpiAwarenessContext GetWindowRect DestroyWindow SetWindowPos SetWindowRgn CreateWindowExW ScreenToClient GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow GetAsyncKeyState DispatchMessageW PeekMessageW TranslateMessage LoadCursorW GetClientRect PostQuitMessage UpdateWindow

gdi32

CreateRoundRectRgn DeleteObject

shell32

SHGetFolderPathW ShellExecuteW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

kernel32

VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapAlloc GetFileType SetFilePointerEx GetFileSizeEx WriteFile GetStdHandle IsValidLocale HeapSize FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx GetUserDefaultLCID EnumSystemLocalesW CompareStringW LCMapStringW GetModuleFileNameW GetLocaleInfoW GetCPInfo GetStringTypeW LCMapStringEx ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle ExitProcess HeapReAlloc DecodePointer EncodePointer DeleteCriticalSection WriteConsoleW SetEndOfFile ReadFile GetStartupInfoW SizeofResource Sleep LockResource LoadResource FindResourceW SystemTimeToFileTime WideCharToMultiByte GetSystemTimeAsFileTime MultiByteToWideChar DeleteFileW LoadLibraryW GetProcAddress FreeLibrary CreateDirectoryW GetVolumeInformationW GetEnvironmentVariableW CreateFileW GetFileAttributesW GetLastError CloseHandle GetComputerNameW OutputDebugStringA GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency IsDBCSLeadByte QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind GetModuleHandleW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlPcToFileHeader RaiseException FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW LocalFree FormatMessageA GetLocaleInfoEx FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx InitOnceComplete InitOnceBeginInitialize TryAcquireSRWLockExclusive WaitForSingleObjectEx GetExitCodeThread GetTickCount64 InitializeCriticalSectionEx EnterCriticalSection LeaveCriticalSection

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

Name

.text

Size

734KB

Virtual Size

734KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

226KB

Virtual Size

225KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13.1MB

Virtual Size

13.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_9104510221c2f1638c69bef694749209_icedid_luca-stealer_njrat_stealc

d3d11

dwmapi

ole32

user32

gdi32

shell32

advapi32

kernel32

imm32

d3dcompiler_47

generic