2026-11-03_6f2af7d628cca6a534cb424f2ae8e101_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_6f2af7d628cca6a534cb424f2ae8e101_icedid_luca-stealer_njrat_stealc
Size 5.1MB
Sample261104-v4e3vaea85
SHA256 a2eed98cf82fc9c28f9884a2ece5407af66378bf4476be20b7007d3993fb77e0
MD5 6f2af7d628cca6a534cb424f2ae8e101
SHA1 c2d7b98505c1b546621be3a1069535d624814444
SHA512 16b1eb25311cdbf3e7e7ef7ee2d568f3cde9cba211182fbf8e5ab8424f41e29cab7d99a15e6d178c6b383def3c3846aa942225e9a13091676ae63ed94820c083
SSDEEP 49152:19bBf9bjD9bHFuJxQXwlK1wxHUrGg2OtC9WiGzZl5giBMtVs2rwQw0er:1dN9XLuJGO8OHUrJbtgYH5giBCzwQSr
TLSH
T19746334577E222ECE077427989910752EAB9BC612B24B9E707D406B17F732C09E7FB60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_6f2af7d628cca6a534cb424f2ae8e101_icedid_luca-stealer_njrat_stealc

File Explorer

2026-11-03_6f2af7d628cca6a534cb424f2ae8e101_icedid_luca-stealer_njrat_stealc

.exe 5.1MB

2026-11-03_6f2af7d628cca6a534cb424f2ae8e101_icedid_luca-stealer_njrat_stealc

IMPHASH 23b35f03486153faf83424b0e3c6d7b2
SHA256 a2eed98cf82fc9c28f9884a2ece5407af66378bf4476be20b7007d3993fb77e0
MD5 6f2af7d628cca6a534cb424f2ae8e101
SHA1 c2d7b98505c1b546621be3a1069535d624814444
SHA512 16b1eb25311cdbf3e7e7ef7ee2d568f3cde9cba211182fbf8e5ab8424f41e29cab7d99a15e6d178c6b383def3c3846aa942225e9a13091676ae63ed94820c083
SSDEEP 49152:19bBf9bjD9bHFuJxQXwlK1wxHUrGg2OtC9WiGzZl5giBMtVs2rwQw0er:1dN9XLuJGO8OHUrJbtgYH5giBCzwQSr
TLSH
T19746334577E222ECE077427989910752EAB9BC612B24B9E707D406B17F732C09E7FB60
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetConsoleMode CreateFileW FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx WriteConsoleW GetACP GetLocalTime GetTickCount GetSystemTimeAsFileTime GetSystemInfo QueryPerformanceCounter GetLastError GetTempPathW GetEnvironmentVariableW GetConsoleOutputCP Sleep GetProcessHeap LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW SetStdHandle GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

user32

FindWindowW MessageBoxW GetWindowTextLengthW GetKeyboardType IsWindowVisible GetSystemMetrics GetForegroundWindow

gdi32

DeleteObject CreateFontW GetDeviceCaps

advapi32

RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegCreateKeyExW RegCloseKey GetUserNameW RegQueryValueExW

ole32

CoInitializeEx CLSIDFromString CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoUninitialize

shlwapi

PathIsDirectoryW StrStrW PathCombineW PathFileExistsW PathRemoveFileSpecW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Name

.data

Size

107KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.didat

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.xdata

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

932B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_6f2af7d628cca6a534cb424f2ae8e101_icedid_luca-stealer_njrat_stealc

kernel32

user32

gdi32

advapi32

ole32

shlwapi

version

generic