General
- Target 2026-09-30_9000a7f344bda0f38d0a7e6c23119977_icedid_luca-stealer_njrat
- Size 2.4MB
- Sample260930-lnrl9styfx
- SHA256 396a973ff011b6b7d038b4b056ce36289d339f541d34a863d529a3b7de960c3c
- MD5 9000a7f344bda0f38d0a7e6c23119977
- SHA1 ef374e59ef35e1af592dc89d691f60353a94dc02
- SHA512 0a3ed333dccc5103340d772b2f77ff26338e7729b27e2b16c24bfa009e8e61437d5290f1a678a3ffc85fdaa1ac708f99454ebc1778f7ca66bb1d240516fa10eb
- SSDEEP 49152:uPsn1pJthxSMmT8oWgBCaXuyMRYmJzxj8Z7hxSMmT8oWgBCaX:uUd+M4FHXLYbJzl8l+M4FHX
- TLSH T14DC5016DEE5803F9E066D238C9434503E6B27C4943619ACF0FA17ABADF376E14D7A601
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target 2026-09-30_9000a7f344bda0f38d0a7e6c23119977_icedid_luca-stealer_njrat
- Size 2.4MB
- SHA256 396a973ff011b6b7d038b4b056ce36289d339f541d34a863d529a3b7de960c3c
- MD5 9000a7f344bda0f38d0a7e6c23119977
- SHA1 ef374e59ef35e1af592dc89d691f60353a94dc02
- SHA512 0a3ed333dccc5103340d772b2f77ff26338e7729b27e2b16c24bfa009e8e61437d5290f1a678a3ffc85fdaa1ac708f99454ebc1778f7ca66bb1d240516fa10eb
- SSDEEP 49152:uPsn1pJthxSMmT8oWgBCaXuyMRYmJzxj8Z7hxSMmT8oWgBCaX:uUd+M4FHXLYbJzl8l+M4FHX
- TLSH T14DC5016DEE5803F9E066D238C9434503E6B27C4943619ACF0FA17ABADF376E14D7A601
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1