2026-09-22_cb19f9f92bf4e9c1aac7aa619516050d_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-22_cb19f9f92bf4e9c1aac7aa619516050d_icedid_luca-stealer_njrat_stealc
Size 4.4MB
Sample260922-vyaaeabd43
SHA256 89a2564778ea9e4869ceb18d35a34a78654cb466bf0e81ef43c348c8cbf87491
MD5 cb19f9f92bf4e9c1aac7aa619516050d
SHA1 9e038ae7e4850bbc197c283be6114e65894ae969
SHA512 17515e6582a551b3e15259eebb11c907690d7e0ed66119834a2390e698cf282a51280826ded2aac4b4aaf71ed1fa00d6bb15a2ba3963bd5b5d5a19e98108b7e4
SSDEEP 49152:/aaulNuOvE7DseXGV0Ii8lBSkIqn5BuEFo2Hko+uudYl1vHsOGd:FSsOs7GVi8lzJx9W2Ad
TLSH
T19A26AE83B3ED8989E0176A384752970BE3717834075583DBBF85496ADEBF4D08BB6B40
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-22_cb19f9f92bf4e9c1aac7aa619516050d_icedid_luca-stealer_njrat_stealc

File Explorer

2026-09-22_cb19f9f92bf4e9c1aac7aa619516050d_icedid_luca-stealer_njrat_stealc

.exe 4.4MB

2026-09-22_cb19f9f92bf4e9c1aac7aa619516050d_icedid_luca-stealer_njrat_stealc

IMPHASH 684053e633a573a55512d4ccc3616ae5
SHA256 89a2564778ea9e4869ceb18d35a34a78654cb466bf0e81ef43c348c8cbf87491
MD5 cb19f9f92bf4e9c1aac7aa619516050d
SHA1 9e038ae7e4850bbc197c283be6114e65894ae969
SHA512 17515e6582a551b3e15259eebb11c907690d7e0ed66119834a2390e698cf282a51280826ded2aac4b4aaf71ed1fa00d6bb15a2ba3963bd5b5d5a19e98108b7e4
SSDEEP 49152:/aaulNuOvE7DseXGV0Ii8lBSkIqn5BuEFo2Hko+uudYl1vHsOGd:FSsOs7GVi8lzJx9W2Ad
TLSH
T19A26AE83B3ED8989E0176A384752970BE3717834075583DBBF85496ADEBF4D08BB6B40
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1292044

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\mil\OneDrive\Documents\Default Project\vectorhub\build\vectorhub.pdb

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile

dcomp

DCompositionCreateDevice

dwmapi

DwmExtendFrameIntoClientArea

winhttp

WinHttpQueryDataAvailable WinHttpReceiveResponse WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpSendRequest WinHttpConnect

kernel32

GetOEMCP GetACP IsValidCodePage HeapReAlloc GetTimeZoneInformation ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx SetConsoleTitleW OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW ReadProcessMemory GetModuleFileNameA GetEnvironmentVariableA MultiByteToWideChar WriteProcessMemory SetThreadPriority WaitForSingleObject Sleep GetTickCount64 GetCurrentThread CreateThread SetLastError GetModuleHandleA LoadLibraryA GetSystemInfo VirtualProtectEx GetProcAddress VirtualAllocEx GetModuleHandleW FlushInstructionCache WideCharToMultiByte Module32NextW VirtualFreeEx VirtualQueryEx Thread32Next Thread32First GetLastError GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetLocaleInfoA QueryPerformanceFrequency FreeLibrary QueryPerformanceCounter GetFileSizeEx CreateProcessW GetExitCodeProcess GetEnvironmentStringsW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetCommandLineW GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW ExitProcess ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap LeaveCriticalSection EnterCriticalSection SetStdHandle HeapSize WriteConsoleW GetFileType TryAcquireSRWLockExclusive ReleaseSRWLockExclusive AcquireSRWLockExclusive SetEndOfFile GetCurrentThreadId SleepConditionVariableSRW WaitForSingleObjectEx GetExitCodeThread FormatMessageA CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx LocalFree GetLocaleInfoEx InitializeCriticalSectionEx GetSystemTimeAsFileTime WakeAllConditionVariable

user32

GetMessageExtraInfo GetCapture TrackMouseEvent GetKeyboardLayout LoadCursorW SetCursor IsWindowUnicode GetKeyState OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData SetCapture ReleaseCapture GetWindowLongW GetWindowThreadProcessId DefWindowProcW PostMessageW GetWindowRect DestroyWindow IsWindowVisible SetWindowPos CreateWindowExW CallNextHookEx UnregisterClassW RegisterClassExW DispatchMessageW ClientToScreen PeekMessageW GetWindowTextA SetWindowDisplayAffinity UnhookWindowsHookEx EnumWindows SetLayeredWindowAttributes TranslateMessage ClipCursor EnumThreadWindows SetWindowsHookExW SetWindowLongW PostQuitMessage UpdateWindow IsIconic EnumDisplaySettingsA GetSystemMetrics GetClassNameW SetCursorPos ScreenToClient IsWindow GetAsyncKeyState GetClientRect GetCursorPos SendInput GetForegroundWindow ShowWindow MsgWaitForMultipleObjectsEx

shell32

ShellExecuteW

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

495KB

Virtual Size

494KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-22_cb19f9f92bf4e9c1aac7aa619516050d_icedid_luca-stealer_njrat_stealc

d3d11

d3dcompiler_47

dcomp

dwmapi

winhttp

kernel32

user32

shell32

imm32

generic