General
- Target 2026-10-02_2c15d2f81648cab45f6f16ae4fc37e73_icedid_luca-stealer_njrat_stealc
- Size 2.3MB
- Sample261003-sr5fvsdh58
- SHA256 250e7be7da43ee0ee9367f4a890cc9430d346fe16d86df2a30677cf6e1b3c823
- MD5 2c15d2f81648cab45f6f16ae4fc37e73
- SHA1 518968bd0373e92ddb7741aab6382e636bfc0d02
- SHA512 2439719897ae51180d156ed990c49376b38b69baad649e767a3c87c6997cf01494c94dcbb915a5b030f06338b07f46124ef7f8fc8703ee8a6a5e984db2923f97
- SSDEEP 49152:jqRzkhoRLDqC0gRyAR1b0iUCiNoKRaxC3YhweoMLa:noRLpb0kixRaxC3Y1oe
- TLSH T159B5C05A669402E8F4B7D239CA964B65EF72BC09432096CB13E476E51F177E04B3E323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_2c15d2f81648cab45f6f16ae4fc37e73_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_2c15d2f81648cab45f6f16ae4fc37e73_icedid_luca-stealer_njrat_stealc
- Size 2.3MB
- SHA256 250e7be7da43ee0ee9367f4a890cc9430d346fe16d86df2a30677cf6e1b3c823
- MD5 2c15d2f81648cab45f6f16ae4fc37e73
- SHA1 518968bd0373e92ddb7741aab6382e636bfc0d02
- SHA512 2439719897ae51180d156ed990c49376b38b69baad649e767a3c87c6997cf01494c94dcbb915a5b030f06338b07f46124ef7f8fc8703ee8a6a5e984db2923f97
- SSDEEP 49152:jqRzkhoRLDqC0gRyAR1b0iUCiNoKRaxC3YhweoMLa:noRLpb0kixRaxC3Y1oe
- TLSH T159B5C05A669402E8F4B7D239CA964B65EF72BC09432096CB13E476E51F177E04B3E323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1