2026-10-26_8982ac088a31bd25238877b561797de6_icedid_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_8982ac088a31bd25238877b561797de6_icedid_luca-stealer_njrat
Size 14.2MB
Sample261027-ppqcdadz2k
SHA256 fef5b2f0a39b02efbdc59299d138dde8ec6f713d431778b1128bd50eca816733
MD5 8982ac088a31bd25238877b561797de6
SHA1 6c02be9f535f19016a04ea562fb525cc89f63c59
SHA512 7072ba9ab8d485dc49644120c850fd96dd612e3692fd2300f0e57e011d29666441ebcd7931ac752b45a5d75e651748e7c55b4aa5cb2340506c24bfa886d4d48f
SSDEEP 393216:hsgSrkkcvUhhRYAf7dt9cHYmXyNDFVM9Hum+1:krkbUhnbpLmXWzM9Om+
TLSH
T122E6F1CB76E900BDF8E6C2B4970B250BF2B175438AF49B971190C5022F737B1959EB62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_8982ac088a31bd25238877b561797de6_icedid_luca-stealer_njrat

File Explorer

2026-10-26_8982ac088a31bd25238877b561797de6_icedid_luca-stealer_njrat

.exe 14.2MB

2026-10-26_8982ac088a31bd25238877b561797de6_icedid_luca-stealer_njrat

IMPHASH ad5ea445a6dbe339e368b55b3ef99c4d
SHA256 fef5b2f0a39b02efbdc59299d138dde8ec6f713d431778b1128bd50eca816733
MD5 8982ac088a31bd25238877b561797de6
SHA1 6c02be9f535f19016a04ea562fb525cc89f63c59
SHA512 7072ba9ab8d485dc49644120c850fd96dd612e3692fd2300f0e57e011d29666441ebcd7931ac752b45a5d75e651748e7c55b4aa5cb2340506c24bfa886d4d48f
SSDEEP 393216:hsgSrkkcvUhhRYAf7dt9cHYmXyNDFVM9Hum+1:krkbUhnbpLmXWzM9Om+
TLSH
T122E6F1CB76E900BDF8E6C2B4970B250BF2B175438AF49B971190C5022F737B1959EB62
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8655335

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

540KB

Virtual Size

540KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

82KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-10-26_8982ac088a31bd25238877b561797de6_icedid_luca-stealer_njrat

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

generic