2026-10-06_6e65f9ed5d8a34f68ab97376c90b6a46_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-06_6e65f9ed5d8a34f68ab97376c90b6a46_icedid_luca-stealer_njrat_stealc
Size 1.2MB
Sample261006-pre97ay1ex
SHA256 200d2233ae76cebfea9bc66ac9780ca8b89385d9c9dd216cd6fba99b385cb443
MD5 6e65f9ed5d8a34f68ab97376c90b6a46
SHA1 71651403045447dae8df164f06aeb7e4ef1d30bd
SHA512 043639d13af6aad44c79e3a58b9092952088feb2eb28fcf8b5106676cebe5a2a474defcf5bcecd3bc2e0dbd207c994c9371129171d4f1bffda311639b5f75d72
SSDEEP 24576:0D1QVrCwg1d7Ed9ZWSmflE38Rzcz8yOcp:dxd9ZsEMRm8
TLSH
T158458E5397A07458C69ACC30946DEAA1E438B8C28D680DB777B0DF781D94BE17E7B720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-06_6e65f9ed5d8a34f68ab97376c90b6a46_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-06_6e65f9ed5d8a34f68ab97376c90b6a46_icedid_luca-stealer_njrat_stealc

.exe 1.2MB

2026-10-06_6e65f9ed5d8a34f68ab97376c90b6a46_icedid_luca-stealer_njrat_stealc

IMPHASH 80275eb549d613b24d1f79753e72b612
SHA256 200d2233ae76cebfea9bc66ac9780ca8b89385d9c9dd216cd6fba99b385cb443
MD5 6e65f9ed5d8a34f68ab97376c90b6a46
SHA1 71651403045447dae8df164f06aeb7e4ef1d30bd
SHA512 043639d13af6aad44c79e3a58b9092952088feb2eb28fcf8b5106676cebe5a2a474defcf5bcecd3bc2e0dbd207c994c9371129171d4f1bffda311639b5f75d72
SSDEEP 24576:0D1QVrCwg1d7Ed9ZWSmflE38Rzcz8yOcp:dxd9ZsEMRm8
TLSH
T158458E5397A07458C69ACC30946DEAA1E438B8C28D680DB777B0DF781D94BE17E7B720
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

618152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead QueryPerformanceFrequency WideCharToMultiByte EncodePointer DecodePointer InitializeCriticalSectionEx GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo SetEndOfFile RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx GetConsoleOutputCP GetConsoleMode CloseHandle ReadFile ReadConsoleW FlushFileBuffers FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapReAlloc HeapSize CreateFileW WriteConsoleW RtlUnwind

Name

.text

Size

762KB

Virtual Size

762KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

105KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

321KB

Virtual Size

330KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-06_6e65f9ed5d8a34f68ab97376c90b6a46_icedid_luca-stealer_njrat_stealc

kernel32

generic