General
- Target 2026-11-09_56e4ea50d61b42bf74d871a99d3d47fb_icedid_luca-stealer_njrat_stealc
- Size 6.1MB
- Sample261110-xxgzzaab78
- SHA256 61d185a8564dba0eca10c37879b55be7534056fc777e7e158177b3efd4317dcd
- MD5 56e4ea50d61b42bf74d871a99d3d47fb
- SHA1 6c6fe8858acd28e60874bb793d1d321d024dddbb
- SHA512 85f615df9aa6e4b7e74d5ea5779671ed5f7a411b2bcbae51fcb9838f330640ac1ae7a8729b287270b18d7b0133d70509c70fbc3faf63fcc3b124228a54706020
- SSDEEP 196608:+V6J/Cua8b1q7XaRxTmMaKaNDV6J/Cua8b1q7XaRxTmMaKaN:+QRW8bULmxuxZQRW8bULmxux
- TLSH T190563355E3AA21FDE9A7DC3989471912D7337C974BA1EAEF03E497118E2F1500E3AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-09_56e4ea50d61b42bf74d871a99d3d47fb_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_56e4ea50d61b42bf74d871a99d3d47fb_icedid_luca-stealer_njrat_stealc
- Size 6.1MB
- SHA256 61d185a8564dba0eca10c37879b55be7534056fc777e7e158177b3efd4317dcd
- MD5 56e4ea50d61b42bf74d871a99d3d47fb
- SHA1 6c6fe8858acd28e60874bb793d1d321d024dddbb
- SHA512 85f615df9aa6e4b7e74d5ea5779671ed5f7a411b2bcbae51fcb9838f330640ac1ae7a8729b287270b18d7b0133d70509c70fbc3faf63fcc3b124228a54706020
- SSDEEP 196608:+V6J/Cua8b1q7XaRxTmMaKaNDV6J/Cua8b1q7XaRxTmMaKaN:+QRW8bULmxuxZQRW8bULmxux
- TLSH T190563355E3AA21FDE9A7DC3989471912D7337C974BA1EAEF03E497118E2F1500E3AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Drops desktop.ini file(s)