General
- Target 2026-09-06_18488135c503a7019d87ee0770a3d81d_icedid_luca-stealer_njrat
- Size 13.3MB
- Sample260907-h86eda1erg
- SHA256 55bb162c341ca204c1ad97e7d469d650c206e4b0c11a87ec029caa8df44c09b2
- MD5 18488135c503a7019d87ee0770a3d81d
- SHA1 8f73e2ed8f0f5d60824b1cca80f63f73bb1d5bf7
- SHA512 da34a906ac534efac86d757e533ec07e9ea54ac3dcaf6d1cace438b0f8a4d94306fa23694a280d50cbb7ea8b993d9efd74b8ae96730802aa7f0d175e61fe3c04
- SSDEEP 393216:Pw1WvSu4WTDKsLNrtQGkDNnotKWvV5YQ6:Pw1gStWysRrK9notkL
- TLSH T1A9E633AA61983A9CC03AC5309737AFD4E379EC2D07A1E56F71D636916B3F421BD02B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_18488135c503a7019d87ee0770a3d81d_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_18488135c503a7019d87ee0770a3d81d_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_18488135c503a7019d87ee0770a3d81d_icedid_luca-stealer_njrat
- Size 13.3MB
- SHA256 55bb162c341ca204c1ad97e7d469d650c206e4b0c11a87ec029caa8df44c09b2
- MD5 18488135c503a7019d87ee0770a3d81d
- SHA1 8f73e2ed8f0f5d60824b1cca80f63f73bb1d5bf7
- SHA512 da34a906ac534efac86d757e533ec07e9ea54ac3dcaf6d1cace438b0f8a4d94306fa23694a280d50cbb7ea8b993d9efd74b8ae96730802aa7f0d175e61fe3c04
- SSDEEP 393216:Pw1WvSu4WTDKsLNrtQGkDNnotKWvV5YQ6:Pw1gStWysRrK9notkL
- TLSH T1A9E633AA61983A9CC03AC5309737AFD4E379EC2D07A1E56F71D636916B3F421BD02B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger