2026-11-13_5cdb901926cf524cc7a46e72c2a5760d_icedid_luca-stealer_njrat

General

Target
2026-11-13_5cdb901926cf524cc7a46e72c2a5760d_icedid_luca-stealer_njrat
Size 1.9MB
Sample261114-p4bsjazy2j
SHA256 9bed557f7f92523569c0b3e6ca0e21562fdb8f697e50dbb10b4b037364cd54b5
MD5 5cdb901926cf524cc7a46e72c2a5760d
SHA1 ef9b4d9dd866944ff6981883693d12890ba01ca4
SHA512 def9a3f75258e7f72426f373aa180db54b2973c76a3d4c44ede089e82bce35a1d4c5e015a31cbf0c7b76e60eb5395fb395e9cc9c1577f49ef0cc987bbc162cb5
SSDEEP 24576:/mkBPtdnkJoxWnHUpkJoxWnHUWkJoxWnHUVkJoxWnHUMkJoxWnHU8kJoxWnHU:/DPtZMYMPMMMNMFM
TLSH
T12395F106EFA606E9D4BFC0798AA14167F672B8194360D7DBA7C1D6471F732E0AA3D700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-13_5cdb901926cf524cc7a46e72c2a5760d_icedid_luca-stealer_njrat

File Explorer

2026-11-13_5cdb901926cf524cc7a46e72c2a5760d_icedid_luca-stealer_njrat

.exe 1.9MB

2026-11-13_5cdb901926cf524cc7a46e72c2a5760d_icedid_luca-stealer_njrat

IMPHASH 8d8d0e9561ff566a581de47a0eb22b85
SHA256 9bed557f7f92523569c0b3e6ca0e21562fdb8f697e50dbb10b4b037364cd54b5
MD5 5cdb901926cf524cc7a46e72c2a5760d
SHA1 ef9b4d9dd866944ff6981883693d12890ba01ca4
SHA512 def9a3f75258e7f72426f373aa180db54b2973c76a3d4c44ede089e82bce35a1d4c5e015a31cbf0c7b76e60eb5395fb395e9cc9c1577f49ef0cc987bbc162cb5
SSDEEP 24576:/mkBPtdnkJoxWnHUpkJoxWnHUWkJoxWnHUVkJoxWnHUMkJoxWnHU8kJoxWnHU:/DPtZMYMPMMMNMFM
TLSH
T12395F106EFA606E9D4BFC0798AA14167F672B8194360D7DBA7C1D6471F732E0AA3D700
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2035200

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW ReadFile GetStdHandle WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW HeapReAlloc CloseHandle GetFileSizeEx SetFilePointerEx GetConsoleMode ReadConsoleW FlushFileBuffers GetConsoleOutputCP FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap CreateFileW HeapSize SetEndOfFile RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-13_5cdb901926cf524cc7a46e72c2a5760d_icedid_luca-stealer_njrat

kernel32

generic