c8a9106f93735ddc6e9a09ad07d75cf447d8d3e3a1ca768787f70715ea468533 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

2026-11-02...at.exe

windows10-2004-x64

7

2026-11-02...at.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-02_b987f99435f6c7db8ee96c9ca5275abc_icedid_luca-stealer_njrat
Size 1.7MB
Sample261102-a7m8eazset
SHA256 c8a9106f93735ddc6e9a09ad07d75cf447d8d3e3a1ca768787f70715ea468533
MD5 b987f99435f6c7db8ee96c9ca5275abc
SHA1 e7b4669076c6fd5cf05ba00280d1a217d21d1ae3
SHA512 c35beb7da75be6826c9dd8bd4f93bfde5271f1b6f4e76dfa8028f04de5206deea016c1190bfd9fceaf3bf0241f3ea862c227a2e437a55e21044513e7abebb1a3
SSDEEP 49152:jBD11SPaAG8h3PLNxL4rQrnaB0zj0yjoB2:jH5KcQOB2Yyjl
TLSH
T14085021BA29505FAD1B7D279C9978402E731780547F0FF8B0394EAA71F276A08E7EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery ransomware spyware stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2026-11-02_b987f99435f6c7db8ee96c9ca5275abc_icedid_luca-stealer_njrat.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

18 signatures

150 seconds

defense_evasion discovery ransomware spyware stealer upx

Behavioral task

behavioral2

Sample

2026-11-02_b987f99435f6c7db8ee96c9ca5275abc_icedid_luca-stealer_njrat.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

17 signatures

150 seconds

discovery spyware stealer upx

Malware Config

Targets

- Target
  2026-11-02_b987f99435f6c7db8ee96c9ca5275abc_icedid_luca-stealer_njrat
- Size 1.7MB
- SHA256 c8a9106f93735ddc6e9a09ad07d75cf447d8d3e3a1ca768787f70715ea468533
- MD5 b987f99435f6c7db8ee96c9ca5275abc
- SHA1 e7b4669076c6fd5cf05ba00280d1a217d21d1ae3
- SHA512 c35beb7da75be6826c9dd8bd4f93bfde5271f1b6f4e76dfa8028f04de5206deea016c1190bfd9fceaf3bf0241f3ea862c227a2e437a55e21044513e7abebb1a3
- SSDEEP 49152:jBD11SPaAG8h3PLNxL4rQrnaB0zj0yjoB2:jH5KcQOB2Yyjl
- TLSH
  T14085021BA29505FAD1B7D279C9978402E731780547F0FF8B0394EAA71F276A08E7EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery ransomware spyware stealer upx
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryransomwarespywarestealerupx

behavioral2

discoveryspywarestealerupx

© 2018-2026

Terms | Privacy