2026-10-08_376369451d5380f131745cd56ccc8807_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-08_376369451d5380f131745cd56ccc8807_icedid_luca-stealer_njrat_stealc
Size 3.3MB
Sample261009-vr2fbada66
SHA256 6363061d4e5187f400c9829c6c1d6cb1ab48f149c00809941c054f10f856bd51
MD5 376369451d5380f131745cd56ccc8807
SHA1 f9f381197f1b0cafc04bfe451f5c5e36c136b0ac
SHA512 69ec8f3997932c28eb853df5b019000b4dbd532bc12211108c054e5910e18e64407ef15a86867bdb97aa5398bf5b1a4a87df597aa1fc70eaf97787277d0c6177
SSDEEP 49152:9tah+DWnk2s+K7VWJ0F8PGOfbC/Cwimtm1rASzwQkIJh2lTpRqWKLSqllqrDwdXY:9tO+DHg71rASI4h2vRqNlIrDw
TLSH
T190F5BF4562B800F8C17AD07CD652AD4BF772341507289BEB23E84AA35F63AE45EBF711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_376369451d5380f131745cd56ccc8807_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-08_376369451d5380f131745cd56ccc8807_icedid_luca-stealer_njrat_stealc

.exe 3.3MB

2026-10-08_376369451d5380f131745cd56ccc8807_icedid_luca-stealer_njrat_stealc

IMPHASH 37cc0fdb624a15d52179bb24eb8e68a6
SHA256 6363061d4e5187f400c9829c6c1d6cb1ab48f149c00809941c054f10f856bd51
MD5 376369451d5380f131745cd56ccc8807
SHA1 f9f381197f1b0cafc04bfe451f5c5e36c136b0ac
SHA512 69ec8f3997932c28eb853df5b019000b4dbd532bc12211108c054e5910e18e64407ef15a86867bdb97aa5398bf5b1a4a87df597aa1fc70eaf97787277d0c6177
SSDEEP 49152:9tah+DWnk2s+K7VWJ0F8PGOfbC/Cwimtm1rASzwQkIJh2lTpRqWKLSqllqrDwdXY:9tO+DHg71rASI4h2vRqNlIrDw
TLSH
T190F5BF4562B800F8C17AD07CD652AD4BF772341507289BEB23E84AA35F63AE45EBF711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1975808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winmm

timeBeginPeriod

kernel32

QueryPerformanceFrequency GlobalAlloc LoadLibraryW GetProcAddress GlobalLock GetModuleHandleW FreeLibrary WideCharToMultiByte QueryPerformanceCounter GlobalUnlock MoveFileW ExitProcess LoadLibraryExW SetEndOfFile HeapSize CreateFileW GetStringTypeW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP GetLastError FindFirstFileExW FlushFileBuffers GetTimeZoneInformation GetFileSizeEx GetConsoleOutputCP HeapReAlloc CloseHandle LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetFileType ReadConsoleW MultiByteToWideChar GetFileAttributesW FindClose GetModuleFileNameW FindFirstFileW FindNextFileW WriteConsoleW IsValidCodePage GetModuleHandleExW GetConsoleMode SetFilePointerEx GetCommandLineW GetCommandLineA TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection RtlUnwind EncodePointer SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId ReadFile GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WakeAllConditionVariable GetSystemTimeAsFileTime WriteFile InitializeCriticalSectionEx GetCurrentThreadId GetStdHandle ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW Sleep

user32

GetGestureInfo GetCursorPos DefWindowProcW AdjustWindowRectEx GetKeyState GetWindowRect DestroyWindow GetDC MessageBoxW SetWindowLongPtrW CreateWindowExW ScreenToClient UnregisterClassW GetWindowLongPtrW RegisterClassExW ShowWindow OpenClipboard GetCapture DispatchMessageW ClientToScreen CloseClipboard EmptyClipboard PeekMessageW SetGestureConfig TrackMouseEvent MoveWindow TranslateMessage GetClipboardData LoadIconW LoadCursorW SetCapture SetClipboardData SetCursor GetClientRect IsClipboardFormatAvailable PostQuitMessage SetProcessDPIAware ReleaseCapture SetForegroundWindow ReleaseDC

gdi32

ChoosePixelFormat CreateSolidBrush SwapBuffers SetPixelFormat GetPixel

comdlg32

GetSaveFileNameW GetOpenFileNameW

shell32

DragAcceptFiles SHFileOperationW DragFinish DragQueryFileW

opengl32

glGetString glTexSubImage2D glPixelStorei glNormalPointer wglMakeCurrent glDisable glMultMatrixf glClearDepth glScalef glGetTexImage glColorPointer glColor4ub glFlush glRasterPos2i glTexImage2D glTranslatef wglDeleteContext glDrawArrays glClearColor glTexCoordPointer glBegin glReadBuffer glDeleteTextures glColor4ubv glTexParameteri glVertex3fv wglGetProcAddress glLoadIdentity wglCreateContext glReadPixels glBlendFunc glFrontFace glMatrixMode glDisableClientState glEnd glLoadMatrixf glDepthMask glVertex3f glEnable glVertexPointer glGenTextures glBindTexture glTexSubImage1D glClear glEnableClientState glViewport glPopMatrix glPointSize glGetError glLineWidth glPushMatrix

vcomp140

_vcomp_fork _vcomp_for_static_end _vcomp_for_static_simple_init

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1019KB

Virtual Size

1018KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_376369451d5380f131745cd56ccc8807_icedid_luca-stealer_njrat_stealc

winmm

kernel32

user32

gdi32

comdlg32

shell32

opengl32

vcomp140

generic