General
- Target 2026-09-06_4cb62348a446799f5f541d2c77d20d2f_icedid_luca-stealer_njrat_stealc
- Size 10.1MB
- Sample260907-ebj84ayakf
- SHA256 3c8bbe3051648ab08945e2fa1671423491a59b24f3927e31e9fc7e753286cb28
- MD5 4cb62348a446799f5f541d2c77d20d2f
- SHA1 82c1ff11ea152b149e444344ccde5ec21a1cf422
- SHA512 b782c62ff836bf36b8ee9f2fba4d9cb641bccd9e7b45dcc91c5dc041b6f8426f7704e3701561c3648121219bb1a809c2da7b7ba09d39dc372431e3aa611dacda
- SSDEEP 196608:/B2h6WslE+pS58vJpwsnm3RvVrBk7QjKPj1mVpxP4HlZJVZsS/LP6L5FXogjP72Y:YJsEcTIKPj11lZJVZsS/LP6L5FXogr7J
- TLSH T127B6DE25EF56125BCDEB62F041C2BBCEF6A868594F780EC637AC5C051B66DDC82276C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_4cb62348a446799f5f541d2c77d20d2f_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_4cb62348a446799f5f541d2c77d20d2f_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_4cb62348a446799f5f541d2c77d20d2f_icedid_luca-stealer_njrat_stealc
- Size 10.1MB
- SHA256 3c8bbe3051648ab08945e2fa1671423491a59b24f3927e31e9fc7e753286cb28
- MD5 4cb62348a446799f5f541d2c77d20d2f
- SHA1 82c1ff11ea152b149e444344ccde5ec21a1cf422
- SHA512 b782c62ff836bf36b8ee9f2fba4d9cb641bccd9e7b45dcc91c5dc041b6f8426f7704e3701561c3648121219bb1a809c2da7b7ba09d39dc372431e3aa611dacda
- SSDEEP 196608:/B2h6WslE+pS58vJpwsnm3RvVrBk7QjKPj1mVpxP4HlZJVZsS/LP6L5FXogjP72Y:YJsEcTIKPj11lZJVZsS/LP6L5FXogr7J
- TLSH T127B6DE25EF56125BCDEB62F041C2BBCEF6A868594F780EC637AC5C051B66DDC82276C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger