2026-10-22_fe0b4a6d78efde3aa2f66cd682176faf_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_fe0b4a6d78efde3aa2f66cd682176faf_icedid_luca-stealer_njrat_stealc
Size 5.5MB
Sample261023-aaevrsbg76
SHA256 5bb124442c04ef713deded430bfdc40a70ec05583c37f8a9011ecb4b74063996
MD5 fe0b4a6d78efde3aa2f66cd682176faf
SHA1 7277feab95c763eef2410d7a676b738f92966fcf
SHA512 6c7738d2e0c62130e03fa8351869d38fe48247da20248bc2097aa0767e470357dc2b2a2ce310805475c7ab7d39afc9d70ed70d89a8ad89d742e7a1b0a20038c4
SSDEEP 49152:fRLSBSz0/nzeCppoRXDocd+GDvF1uIRDqytgBO5wn7TXHTEfk2AgPNyr6FfC:fhSl/zeggr+GjF152+lWnIfkUlyIf
TLSH
T1F84623467BC419F9E472423449D69202FBB2747447249ADF1BA056FB9E233802FBDB39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_fe0b4a6d78efde3aa2f66cd682176faf_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-22_fe0b4a6d78efde3aa2f66cd682176faf_icedid_luca-stealer_njrat_stealc

.exe 5.5MB

2026-10-22_fe0b4a6d78efde3aa2f66cd682176faf_icedid_luca-stealer_njrat_stealc

IMPHASH 30c9fb6fa9bb9f2cb027882c6db17c9d
SHA256 5bb124442c04ef713deded430bfdc40a70ec05583c37f8a9011ecb4b74063996
MD5 fe0b4a6d78efde3aa2f66cd682176faf
SHA1 7277feab95c763eef2410d7a676b738f92966fcf
SHA512 6c7738d2e0c62130e03fa8351869d38fe48247da20248bc2097aa0767e470357dc2b2a2ce310805475c7ab7d39afc9d70ed70d89a8ad89d742e7a1b0a20038c4
SSDEEP 49152:fRLSBSz0/nzeCppoRXDocd+GDvF1uIRDqytgBO5wn7TXHTEfk2AgPNyr6FfC:fhSl/zeggr+GjF152+lWnIfkUlyIf
TLSH
T1F84623467BC419F9E472423449D69202FBB2747447249ADF1BA056FB9E233802FBDB39
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WriteConsoleW CreateFileW CloseHandle GetOEMCP GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetACP GetComputerNameW GetLocalTime MulDiv GetSystemTimeAsFileTime GetSystemInfo GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetLastError GetConsoleMode Sleep GetProcessHeap LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle

user32

FindWindowW MessageBoxW GetWindowTextLengthW GetDoubleClickTime IsWindowVisible GetSystemMetrics GetForegroundWindow

gdi32

DeleteObject CreateFontW GetDeviceCaps

advapi32

RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegCreateKeyExW RegCloseKey GetUserNameW RegQueryValueExW

ole32

CoInitializeEx CLSIDFromString CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoUninitialize

shlwapi

PathIsDirectoryW StrStrW PathCombineW PathFileExistsW PathRemoveFileSpecW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Name

.rdata

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.voltbl

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.debug

Size

3KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.sdata

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

856B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_fe0b4a6d78efde3aa2f66cd682176faf_icedid_luca-stealer_njrat_stealc

kernel32

user32

gdi32

advapi32

ole32

shlwapi

version

generic