2026-10-15_f133a51b6840f0db7a6d0bc16f175b5e_akira_icedid_luca-stealer_njrat_rusty-stealer_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-15_f133a51b6840f0db7a6d0bc16f175b5e_akira_icedid_luca-stealer_njrat_rusty-stealer_stealc
Size 2.1MB
Sample261015-3fca2sef84
SHA256 0ac482d59d87b2e168156f6b632e5c83c5e7503abd87a3d652de9cfdedb3a33a
MD5 f133a51b6840f0db7a6d0bc16f175b5e
SHA1 7b878322d463145e430c85e833b33737c588ac15
SHA512 6f3af00336b811df6c1b62fd82650e1c5a74f738fe646cf4d8471640c759c0396d24bbc252c3027ae666910bd27242c908c0f857e0f0e8ef84daab3e2a700216
SSDEEP 49152:rlYAQ/Gg4tSmCS8sIyNjWX6HT1i2vUo3DqqldPx:GDG3/ZDDqIP
TLSH
T163A57C12AA8988F9C159C4749646C7B2DD613C8A0727B5EF06D63E273E3BAE01F3D711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-15_f133a51b6840f0db7a6d0bc16f175b5e_akira_icedid_luca-stealer_njrat_rusty-stealer_stealc

File Explorer

2026-10-15_f133a51b6840f0db7a6d0bc16f175b5e_akira_icedid_luca-stealer_njrat_rusty-stealer_stealc

.exe 2.1MB

2026-10-15_f133a51b6840f0db7a6d0bc16f175b5e_akira_icedid_luca-stealer_njrat_rusty-stealer_stealc

IMPHASH c85385ef7ea90cd7e6e448254a32d42d
SHA256 0ac482d59d87b2e168156f6b632e5c83c5e7503abd87a3d652de9cfdedb3a33a
MD5 f133a51b6840f0db7a6d0bc16f175b5e
SHA1 7b878322d463145e430c85e833b33737c588ac15
SHA512 6f3af00336b811df6c1b62fd82650e1c5a74f738fe646cf4d8471640c759c0396d24bbc252c3027ae666910bd27242c908c0f857e0f0e8ef84daab3e2a700216
SSDEEP 49152:rlYAQ/Gg4tSmCS8sIyNjWX6HT1i2vUo3DqqldPx:GDG3/ZDDqIP
TLSH
T163A57C12AA8988F9C159C4749646C7B2DD613C8A0727B5EF06D63E273E3BAE01F3D711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

757108

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

xplat_launcher.pdb

kernel32

SleepConditionVariableSRW WakeAllConditionVariable ReadConsoleW GetCPInfo GetStringTypeW LCMapStringEx IsValidCodePage IsProcessorFeaturePresent GetOEMCP EncodePointer TlsSetValue GetProcessHeap HeapFree HeapAlloc FormatMessageW GetStartupInfoW TlsFree TlsAlloc InitializeSListHead UnhandledExceptionFilter EnterCriticalSection LoadLibraryW GetProcessHandleCount SetEvent LeaveCriticalSection UpdateProcThreadAttribute InitializeProcThreadAttributeList DeleteProcThreadAttributeList InitializeCriticalSectionEx DeleteCriticalSection DecodePointer LocalFree AcquireSRWLockExclusive SetThreadAffinityMask GetCurrentProcessorNumber IsWow64Process SetProcessMitigationPolicy GetProcessMitigationPolicy SetHandleInformation SetThreadInformation GetThreadId Sleep UnregisterWaitEx ReleaseSRWLockExclusive TryAcquireSRWLockExclusive RegisterWaitForSingleObject EnumSystemLocalesEx GetUserDefaultLocaleName GetUserDefaultLCID GetUserDefaultLangID TerminateProcess GetCurrentThreadId SetStdHandle DuplicateHandle AddDllDirectory SetDefaultDllDirectories InitializeCriticalSectionAndSpinCount GetCommandLineA SwitchToThread LoadLibraryExA HeapSize ExitProcess FlsFree CompareStringW SetThreadErrorMode LCMapStringW GetLocaleInfoW FlsSetValue FlsGetValue FlsAlloc GetModuleHandleW VirtualProtect GetModuleHandleA WriteConsoleW HeapQueryInformation WaitForSingleObject GetConsoleOutputCP GetConsoleMode GetStdHandle ReleaseMutex CloseHandle GetCurrentProcessId TlsGetValue IsValidLocale lstrlenW GetCurrentProcess LoadLibraryA WaitForSingleObjectEx SetLastError GetCurrentThread SetThreadStackGuarantee GetACP MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW FreeLibrary LoadLibraryExW AddVectoredExceptionHandler HeapReAlloc GetCurrentDirectoryW CreateMutexA GetEnvironmentVariableW QueryPerformanceFrequency GetCommandLineW GetFullPathNameW CreateFileW SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx FindFirstFileExW FindClose QueryPerformanceCounter SetEnvironmentVariableW GetFinalPathNameByHandleW GetFileType SetCurrentDirectoryW CreateThread CreateIoCompletionPort GetQueuedCompletionStatus TerminateJobObject PostQueuedCompletionStatus SetInformationJobObject HeapDestroy GetTickCount IsDebuggerPresent RaiseException WriteProcessMemory FindNextFileW HeapSetInformation GetVersionExW GetProductInfo GetNativeSystemInfo GetEnvironmentStringsW FreeEnvironmentStringsW CreateFileMappingW MapViewOfFile ReadProcessMemory CreateEventW VirtualFree GetProcessHeaps GetSystemTimeAsFileTime GetModuleFileNameW GetLocalTime OutputDebugStringA WriteFile CreateJobObjectW QueryInformationJobObject VirtualAllocEx VirtualProtectEx FlushFileBuffers GetFileSizeEx SetFilePointerEx ExpandEnvironmentStringsW CreateMutexW UnmapViewOfFile GetFileAttributesW QueryDosDeviceW GetLongPathNameW VirtualFreeEx DebugBreak GetProcAddress GetLastError EnumSystemLocalesW SetUnhandledExceptionFilter CreateRemoteThread ReadFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

RtlUnwind RtlUnwindEx RtlNtStatusToDosError RtlDllShutdownInProgress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind NtWriteFile RtlPcToFileHeader NtReadFile RtlInitUnicodeString RtlCaptureStackBackTrace

oleaut32

SysFreeString GetErrorInfo SysStringLen

user32

GetUserObjectInformationW CreateDesktopW CloseDesktop CloseWindowStation GetProcessWindowStation CreateWindowStationW SetProcessWindowStation MessageBoxA GetThreadDesktop

userenv

GetUserProfileDirectoryW DeriveAppContainerSidFromAppContainerName CreateAppContainerProfile

shell32

SHGetKnownFolderPath

advapi32

OpenSCManagerW OpenServiceW SetThreadToken CloseServiceHandle AdjustTokenPrivileges RegCloseKey RegOpenKeyExW RegQueryValueExW RevertToSelf RegDisablePredefinedCache GetTokenInformation OpenProcessToken DuplicateTokenEx OpenThreadToken SetTokenInformation LookupPrivilegeValueW CreateRestrictedToken CreateProcessAsUserW FreeSid IsValidSid GetLengthSid ConvertStringSidToSidW ConvertSidToStringSidW EqualSid GetAce IsValidSecurityDescriptor GetSecurityDescriptorControl GetSecurityDescriptorOwner GetSecurityDescriptorGroup GetSecurityDescriptorDacl GetSecurityDescriptorSacl GetNamedSecurityInfoW GetSecurityInfo RegCreateKeyExW SetEntriesInAclW BuildTrusteeWithSidW AddMandatoryAce InitializeAcl IsValidAcl AccessCheck MapGenericMask SetSecurityInfo

bcryptprimitives

ProcessPrng

dbghelp

SymFromAddr SymSetSearchPathW SymGetSearchPathW SymSetOptions SymCleanup SymGetLineFromAddr64 SymInitialize

winmm

timeGetTime

Name

.text

Size

911KB

Virtual Size

911KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

269KB

Virtual Size

269KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

301KB

Virtual Size

301KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

572KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-15_f133a51b6840f0db7a6d0bc16f175b5e_akira_icedid_luca-stealer_njrat_rusty-stealer_stealc

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

oleaut32

user32

userenv

shell32

advapi32

bcryptprimitives

dbghelp

winmm

generic