General
- Target 2026-10-02_5f9bd91836d8ff18e7a769c9ebbbd189_icedid_luca-stealer_njrat
- Size 1.7MB
- Sample261003-nrtxxaxdpc
- SHA256 6c92fe3b8b8d4c0ce1470f07dba13e87140ef5a041709973b9a38556936bddf8
- MD5 5f9bd91836d8ff18e7a769c9ebbbd189
- SHA1 43f367b075dfce46ada80b5700ec0b08ea6b671e
- SHA512 1630b18a278e585c4ec0892c6267dc216e39f1106d2c6c8570140b896ff4676c6650c4a47757744f9ddafd46176c2f7620fa74443cdaeb5c9d2ce0f53b1ee8ff
- SSDEEP 24576:5C2GEW/qfxJaKngL2jdshRTdG1YxITqvfPkbIcbjLpsqjnhMgeiCl7G0nehbGZpv:42vsYxJarSj8RoTCCdDmg27RnWGj
- TLSH T10F85021AE7A515FDD07BD279C9939805FA31380A0360AA8B07E459FB1F6B7E04E7DB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-02_5f9bd91836d8ff18e7a769c9ebbbd189_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_5f9bd91836d8ff18e7a769c9ebbbd189_icedid_luca-stealer_njrat
- Size 1.7MB
- SHA256 6c92fe3b8b8d4c0ce1470f07dba13e87140ef5a041709973b9a38556936bddf8
- MD5 5f9bd91836d8ff18e7a769c9ebbbd189
- SHA1 43f367b075dfce46ada80b5700ec0b08ea6b671e
- SHA512 1630b18a278e585c4ec0892c6267dc216e39f1106d2c6c8570140b896ff4676c6650c4a47757744f9ddafd46176c2f7620fa74443cdaeb5c9d2ce0f53b1ee8ff
- SSDEEP 24576:5C2GEW/qfxJaKngL2jdshRTdG1YxITqvfPkbIcbjLpsqjnhMgeiCl7G0nehbGZpv:42vsYxJarSj8RoTCCdDmg27RnWGj
- TLSH T10F85021AE7A515FDD07BD279C9939805FA31380A0360AA8B07E459FB1F6B7E04E7DB01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1