Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
07/09/2026, 07:25
General
- Target 2026-09-06_18488135c503a7019d87ee0770a3d81d_icedid_luca-stealer_njrat.exe
- Size 13.3MB
- Sample260907-h86eda1erg
- SHA256 55bb162c341ca204c1ad97e7d469d650c206e4b0c11a87ec029caa8df44c09b2
Malware Config
Signatures
- Detects executables packed with VMProtect. 9 IoCs
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 2 IoCs
- VMProtect packed file 9 IoCs
Detects executables packed with VMProtect commercial packer.
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious behavior: EnumeratesProcesses 24 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-06_18488135c503a7019d87ee0770a3d81d_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-06_18488135c503a7019d87ee0770a3d81d_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\FCLibBypass\bypass.exeC:\Users\Admin\AppData\Local\Temp\FCLibBypass\bypass.exe2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
bypass.exe
fc_helper.dll
KxC.dll
memory/3736-14-0x00007FF70D4E0000-0x00007FF70ECEB000-memory.dmp
memory/3736-5-0x00007FF70D51E000-0x00007FF70DFE7000-memory.dmp
memory/3736-11-0x00007FFA9B780000-0x00007FFA9B782000-memory.dmp
memory/3736-10-0x00007FFA9B770000-0x00007FFA9B772000-memory.dmp
memory/3736-9-0x00007FFA9BCF0000-0x00007FFA9BCF2000-memory.dmp
memory/3736-7-0x00007FFA9DD40000-0x00007FFA9DD42000-memory.dmp
memory/3736-6-0x00007FFA9DD30000-0x00007FFA9DD32000-memory.dmp
memory/3736-13-0x00007FFA9DD60000-0x00007FFA9DD62000-memory.dmp
memory/3736-8-0x00007FFA9BCE0000-0x00007FFA9BCE2000-memory.dmp
memory/3736-12-0x00007FFA9DD50000-0x00007FFA9DD52000-memory.dmp
memory/3736-23-0x00007FF70D4E0000-0x00007FF70ECEB000-memory.dmp
memory/3736-25-0x00007FFA9DD70000-0x00007FFA9DD72000-memory.dmp
memory/3736-26-0x00007FFA9DD80000-0x00007FFA9DD82000-memory.dmp
memory/3736-27-0x00007FFA7A7C0000-0x00007FFA7B2BD000-memory.dmp
memory/3736-31-0x0000023314DB0000-0x0000023314E62000-memory.dmp
memory/3736-32-0x00007FF70D51E000-0x00007FF70DFE7000-memory.dmp
memory/3736-33-0x00007FF70D4E0000-0x00007FF70ECEB000-memory.dmp
memory/3736-34-0x00007FF70D4E0000-0x00007FF70ECEB000-memory.dmp
memory/3736-35-0x00007FF70D4E0000-0x00007FF70ECEB000-memory.dmp
memory/3736-36-0x00007FF70D4E0000-0x00007FF70ECEB000-memory.dmp