General

  • Target
    2026-10-28_9ecd0e59be44dec7ee82d1b07806bc88_hijackloader_icedid_luca-stealer_njrat_stealc
  • Size 8.9MB
  • Sample261029-2dvh6scf34
  • SHA256 e952886ff2c74ead54a7ab09263fcd24bb75d7bc73ad1eceef82f530a2872f87
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-28_9ecd0e59be44dec7ee82d1b07806bc88_hijackloader_icedid_luca-stealer_njrat_stealc
    • Size 8.9MB
    • SHA256 e952886ff2c74ead54a7ab09263fcd24bb75d7bc73ad1eceef82f530a2872f87
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies security service

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks