General
- Target 2026-09-30_860228d666eb56d1f9bac018f3c6a522_icedid_luca-stealer_ryuk
- Size 10.3MB
- Sample261001-m117xaae72
- SHA256 2a4db2234b87d6c71aed3cc6aab53a1a0f77f0b75d0273a4e345330595c468eb
- MD5 860228d666eb56d1f9bac018f3c6a522
- SHA1 ced0ea9f98fa790b5a3a09036af181262da6ed90
- SHA512 e7e11979d2063e32f91c15b45e233fe5c99460f58bcef567b16a0c0d4c10fc2cb537d4ccd0fba68b1deba37cbe57c159349d1c701534dff2dab9a0d2cd7867f5
- SSDEEP 98304:53uLqO89gbetTS/KOW+xeAhTYSqs5OKw7wKnAGUWO2BQrmd:J2xomsiiUW7
- TLSH T103B66C47F2A2A1E8C069C071D31E6233FAF27C4947347AE75BD88B212E65FD06639B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-30_860228d666eb56d1f9bac018f3c6a522_icedid_luca-stealer_ryuk.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_860228d666eb56d1f9bac018f3c6a522_icedid_luca-stealer_ryuk.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_860228d666eb56d1f9bac018f3c6a522_icedid_luca-stealer_ryuk
- Size 10.3MB
- SHA256 2a4db2234b87d6c71aed3cc6aab53a1a0f77f0b75d0273a4e345330595c468eb
- MD5 860228d666eb56d1f9bac018f3c6a522
- SHA1 ced0ea9f98fa790b5a3a09036af181262da6ed90
- SHA512 e7e11979d2063e32f91c15b45e233fe5c99460f58bcef567b16a0c0d4c10fc2cb537d4ccd0fba68b1deba37cbe57c159349d1c701534dff2dab9a0d2cd7867f5
- SSDEEP 98304:53uLqO89gbetTS/KOW+xeAhTYSqs5OKw7wKnAGUWO2BQrmd:J2xomsiiUW7
- TLSH T103B66C47F2A2A1E8C069C071D31E6233FAF27C4947347AE75BD88B212E65FD06639B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)