General
- Target 2026-09-16_506b51ee53eaef05b67e9eb18d80b288_icedid_njrat_stealc
- Size 3.1MB
- Sample260916-1js2vstvbz
- SHA256 2f81556a1b118f970105481e2aff6400186ff2d7effa1c183b12a9f98d8e3552
- MD5 506b51ee53eaef05b67e9eb18d80b288
- SHA1 86644d1c57e30f1062491689ab492f38e396b38f
- SHA512 a3ccc8d2ea09b871f34e619f995239733fb3048f2d531bd26070ae8408c9ccc5f1bb1379bf96d41524dff675e438439150d1478ac9337ecb491d5585e68f95f0
- SSDEEP 49152:I0Eke07BzpcGx4qDKq2KL2mJa4V1z9Klz2/N/j2U4FH:I8D3J/v9Klz2Bj2jF
- TLSH T14AE56B16A1F84064E0B2817C9A7AC4F1E2657FC74760498B32FC3D1FBF766990A7A634
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_506b51ee53eaef05b67e9eb18d80b288_icedid_njrat_stealc.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_506b51ee53eaef05b67e9eb18d80b288_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_506b51ee53eaef05b67e9eb18d80b288_icedid_njrat_stealc
- Size 3.1MB
- SHA256 2f81556a1b118f970105481e2aff6400186ff2d7effa1c183b12a9f98d8e3552
- MD5 506b51ee53eaef05b67e9eb18d80b288
- SHA1 86644d1c57e30f1062491689ab492f38e396b38f
- SHA512 a3ccc8d2ea09b871f34e619f995239733fb3048f2d531bd26070ae8408c9ccc5f1bb1379bf96d41524dff675e438439150d1478ac9337ecb491d5585e68f95f0
- SSDEEP 49152:I0Eke07BzpcGx4qDKq2KL2mJa4V1z9Klz2/N/j2U4FH:I8D3J/v9Klz2Bj2jF
- TLSH T14AE56B16A1F84064E0B2817C9A7AC4F1E2657FC74760498B32FC3D1FBF766990A7A634
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stealc stealer Version 3
-
Modifies boot configuration data using bcdedit
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory