General
- Target 2026-10-23_25a6e9b7792f315f3a946af26cf38c1f_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- Sample261023-rlkzlab181
- SHA256 292f6ec9256c4581dc6ad7702b99486900b83dbd23ce3f033fb46c8b365081dd
- MD5 25a6e9b7792f315f3a946af26cf38c1f
- SHA1 9ed5e89de11394558ab3634261bed67e50ae4cf3
- SHA512 d8529b218fe716dcd477d98e472c46477d1756f60b8e9def7b517e40283398e14a2ee242356ae92b07e735897397345419bc3eedadbb9fdce1e08130138edece
- SSDEEP 24576:dMcKO40Bv4kOdGcNqFjokufAYth7OSt9CVMXkSJdzcxbDkel3dGcNqFjokufAYte:dR9BvtchdTOZVZGdzvchdTOZVZGdz
- TLSH T13E064A1AD6ED985FE1F662B592441930C0A1DAE7810EC8DE319E7FECDD66C006D18ECB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_25a6e9b7792f315f3a946af26cf38c1f_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-23_25a6e9b7792f315f3a946af26cf38c1f_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_25a6e9b7792f315f3a946af26cf38c1f_icedid_luca-stealer_njrat_stealc
- Size 3.7MB
- SHA256 292f6ec9256c4581dc6ad7702b99486900b83dbd23ce3f033fb46c8b365081dd
- MD5 25a6e9b7792f315f3a946af26cf38c1f
- SHA1 9ed5e89de11394558ab3634261bed67e50ae4cf3
- SHA512 d8529b218fe716dcd477d98e472c46477d1756f60b8e9def7b517e40283398e14a2ee242356ae92b07e735897397345419bc3eedadbb9fdce1e08130138edece
- SSDEEP 24576:dMcKO40Bv4kOdGcNqFjokufAYth7OSt9CVMXkSJdzcxbDkel3dGcNqFjokufAYte:dR9BvtchdTOZVZGdzvchdTOZVZGdz
- TLSH T13E064A1AD6ED985FE1F662B592441930C0A1DAE7810EC8DE319E7FECDD66C006D18ECB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1