2026-10-26_9975363d3e8fac02f2a6a6b74c4eb69e_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_9975363d3e8fac02f2a6a6b74c4eb69e_icedid_luca-stealer_njrat_stealc
Size 5.7MB
Sample261027-najevadv4q
SHA256 b50057c12b6576706e222faa74595ea57f365c94909fd7d9e71eaa417856ed60
MD5 9975363d3e8fac02f2a6a6b74c4eb69e
SHA1 279a900d756ac33fafc85e6fa01bdfb77c968a69
SHA512 21a758033920defb2449c5506454ba1aa9f10e91c90b7a6517e9ff3a75569834250c119dbea0ba4d30c1abaae5ad23a0f0039491eeb3e7d92a7edd2608d4a305
SSDEEP 49152:PixIBGaQAmAkxcYSIoOYNYk7/7KRrccFAzyVCIxTrL4vYjQg4oBkLa0QdVA:KWMZhqOcfKRrbTCcr6YUgbX0A
TLSH
T1CC56330AF3A904F8E6B3827898545A55E7B23C6103317FEF47B413B29E171819D7EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_9975363d3e8fac02f2a6a6b74c4eb69e_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-26_9975363d3e8fac02f2a6a6b74c4eb69e_icedid_luca-stealer_njrat_stealc

.exe 5.7MB

2026-10-26_9975363d3e8fac02f2a6a6b74c4eb69e_icedid_luca-stealer_njrat_stealc

IMPHASH 1217f19ba9a9bbdd036c1a01b292a005
SHA256 b50057c12b6576706e222faa74595ea57f365c94909fd7d9e71eaa417856ed60
MD5 9975363d3e8fac02f2a6a6b74c4eb69e
SHA1 279a900d756ac33fafc85e6fa01bdfb77c968a69
SHA512 21a758033920defb2449c5506454ba1aa9f10e91c90b7a6517e9ff3a75569834250c119dbea0ba4d30c1abaae5ad23a0f0039491eeb3e7d92a7edd2608d4a305
SSDEEP 49152:PixIBGaQAmAkxcYSIoOYNYk7/7KRrccFAzyVCIxTrL4vYjQg4oBkLa0QdVA:KWMZhqOcfKRrbTCcr6YUgbX0A
TLSH
T1CC56330AF3A904F8E6B3827898545A55E7B23C6103317FEF47B413B29E171819D7EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetConsoleMode GetConsoleOutputCP HeapReAlloc HeapSize SetFilePointerEx CloseHandle CreateFileW GetLocalTime WriteConsoleW GetSystemTimeAsFileTime GetSystemInfo IsProcessorFeaturePresent QueryPerformanceCounter GetLastError GetTempPathW FlushFileBuffers Sleep GetProcessHeap LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW SetStdHandle SetEnvironmentVariableW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW

user32

MessageBoxW GetWindowTextLengthW GetDoubleClickTime GetKeyboardType GetSystemMetrics IsWindowVisible FindWindowW GetForegroundWindow

gdi32

DeleteObject CreateFontW GetDeviceCaps

advapi32

RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegCreateKeyExW RegCloseKey GetUserNameW RegQueryValueExW

ole32

CoCreateInstance CLSIDFromString CoTaskMemAlloc CoTaskMemFree CoInitializeEx CoUninitialize

shlwapi

PathIsDirectoryW StrStrW PathCombineW PathFileExistsW PathRemoveFileSpecW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Name

.reloc

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.retplne

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rrdata

Size

5.5MB

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

856B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_9975363d3e8fac02f2a6a6b74c4eb69e_icedid_luca-stealer_njrat_stealc

kernel32

user32

gdi32

advapi32

ole32

shlwapi

version

generic