f6c6204a584b20d676e508458d024e75cb14751d3f41ae3502fe4e8f63830064

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 04:17

Target
2026-09-08_89d41535ddc73927569c4421bb5248f2_icedid_luca-stealer_njrat_stealc.exe
Size 7.0MB
Sample260910-ewppbafn5v
SHA256 f6c6204a584b20d676e508458d024e75cb14751d3f41ae3502fe4e8f63830064
MD5 89d41535ddc73927569c4421bb5248f2
SHA1 efba6691bb68b16798bbdc478a6032cd3032e0bd
SHA512 85a8abd86b9762418923f0bc5a11c428a432328cf00d9351ed274b8310b1f5777124d0b894581dda4e6de969f71f8771781fce254ecd0a20c4a48bf5351364d0
SSDEEP 49152:F8k+iR8QNMJRVUfseQKZBCBU8RgxD/M+gnGFBc+VVoRfqZ0o+ii8x7RkwiJTRA3+:IybRieF/IArwk6ExR4KOFzJLgjZLH/m
TLSH
T16E768DE623F2E9CDD157C0BE8692B82FE68F7039031565E78195E2165E13CC1762BF0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

themida

Detects executables packed with Themida 1 IoCs

resource	yara_rule
behavioral1/memory/4684-0-0x0000000140000000-0x0000000140730000-memory.dmp	INDICATOR_EXE_Packed_Themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
behavioral1/memory/4684-0-0x0000000140000000-0x0000000140730000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\2026-09-08_89d41535ddc73927569c4421bb5248f2_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-08_89d41535ddc73927569c4421bb5248f2_icedid_luca-stealer_njrat_stealc.exe"
1⤵
PID:4684

memory/4684-0-0x0000000140000000-0x0000000140730000-memory.dmp

Download

memory/4684-1-0x0000000140000000-0x0000000140730000-memory.dmp

Download