2026-11-09_69fca0cdd60a23c5bfbc149d8c0ee57a_icedid_luca-stealer_njrat

General

Target
2026-11-09_69fca0cdd60a23c5bfbc149d8c0ee57a_icedid_luca-stealer_njrat
Size 11.2MB
Sample261110-vm8zlaha67
SHA256 8df14a6ed164fe37e641ff8c96de3e0f6c4d92b18e3f05d0eb16e21cfd0df258
MD5 69fca0cdd60a23c5bfbc149d8c0ee57a
SHA1 11a6ef09ba511d96c530996e78834a5e84740a59
SHA512 a0d89628c6fc8da1c33f6b7323c756560711ecf10fb5be47fbde28913fe5f01ecf131670235d924bdf3645838f15105d3dcf560adae8844dee8ed4bfff5a8735
SSDEEP 196608:tAeeM8/PkIZZhf1SQj76hK50O4Z2uZuvaputPvPQ1Xd09jx0RHkc4G5zbGp:xelnkIZZh9nj7DYNhcRvo1isRrNAp
TLSH
T144C6334DA7828CD8D87720BCA59516B173B67E332320C29B0751EAF4EF365E0592E367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_69fca0cdd60a23c5bfbc149d8c0ee57a_icedid_luca-stealer_njrat

File Explorer

2026-11-09_69fca0cdd60a23c5bfbc149d8c0ee57a_icedid_luca-stealer_njrat

.exe 11.2MB

2026-11-09_69fca0cdd60a23c5bfbc149d8c0ee57a_icedid_luca-stealer_njrat

IMPHASH 069151096a7bef60765f01aef7750ef6
SHA256 8df14a6ed164fe37e641ff8c96de3e0f6c4d92b18e3f05d0eb16e21cfd0df258
MD5 69fca0cdd60a23c5bfbc149d8c0ee57a
SHA1 11a6ef09ba511d96c530996e78834a5e84740a59
SHA512 a0d89628c6fc8da1c33f6b7323c756560711ecf10fb5be47fbde28913fe5f01ecf131670235d924bdf3645838f15105d3dcf560adae8844dee8ed4bfff5a8735
SSDEEP 196608:tAeeM8/PkIZZhf1SQj76hK50O4Z2uZuvaputPvPQ1Xd09jx0RHkc4G5zbGp:xelnkIZZh9nj7DYNhcRvo1isRrNAp
TLSH
T144C6334DA7828CD8D87720BCA59516B173B67E332320C29B0751EAF4EF365E0592E367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

53092

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

RtlUnwindEx WriteConsoleW HeapReAlloc CreateDirectoryW SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetFullPathNameW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError CloseHandle GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA QueryPerformanceCounter SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_69fca0cdd60a23c5bfbc149d8c0ee57a_icedid_luca-stealer_njrat

shell32

kernel32

generic