Hostile 92% Download

2026-09-27_2b98a2df97bd16c773bba34c81aebb58_icedid_luca-stealer_njrat_stealc

Multi-malware stealer with C2

Resource loader with registry and anti-debugGeneric game-cheat control set
SHA-256acaad6c514872dd04125e801d0db609470fe3a1c85aba36b66a9a46bc4e06463
URLhttps://tria.ge/api/v0/samples/260928-y316gatxhs/sample
MaleculeK₂(GaLi₂)O₄(C₅As₁₄Dy₂Er₇)H₁₀(Os₂₂Cm₃Cr₃Db₃F₉Hf₃MgPo₁₉TiU)Md₅(Bi₁₈BkHeSi₄)

Evidence

CMD caretaker obfuscation (^) 0x41d483–0x41d5a3
0x41d48302040004c6842425020400ffc6842426......$%......$&
0x41d49302040000c684242702040088c6842428......$'......$(
0x41d4a302040003c684242902040025c684242a......$)...%..$*
0x41d4b302040000c684242b0204009bc684242c......$+......$,
0x41d4c302040003c684242d02040025c684242e......$-...%..$.
0x41d4d3020400ffc684242f0204007bc6842430......$/...{..$0
0x41d4e302040005c68424310204006ac6842432......$1...j..$2
0x41d4f302040000c684243302040058c6842434......$3...X..$4
0x41d50302040005c68424350204006ac6842436......$5...j..$6
0x41d51302040000c684243702040058c6842438......$7...X..$8
0x41d52302040005c68424390204006ac684243a......$9...j..$:
0x41d53302040000c684243b02040058c684243c......$;...X..$<
0x41d54302040005c684243d0204006ac684243e......$=...j..$>
0x41d55302040000c684243f02040058c6842440......$?...X..$@
0x41d56302040005c68424410204006ac6842442......$A...j..$B
0x41d57302040000c684244302040058c6842444......$C...X..$D
0x41d58302040005c68424450204006ac6842446......$E...j..$F
0x41d59302040000c684244702040058c6842448......$G...X..$H
0x41d5a302040005c6842449020400 ......$I...
Create registry key via WinAPI 0x575fc0–0x5762b0
⋯3 more rows
0x575ff006050504050404030504040304030302................
0x57600005040403040303020403030203020201................
0x57601006050504050404030504040304030302................
0x57602005040403040303020403030203020201................
0x57603005040403040303020403030203020201................
0x57604004030302030202010302020102010100................
0x576050000102030405060708090a0b0c0d0e0f................
0x57606002030405060708090a0b0c0d0e0f0e0f................
0x57607000010405060708090a0b0c0d0e0f0e0f................
0x5760800405060708090a0b0c0d0e0f0c0d0e0f................
0x57609000010203060708090a0b0c0d0e0f0e0f................
0x5760a00203060708090a0b0c0d0e0f0c0d0e0f................
0x5760b00001060708090a0b0c0d0e0f0c0d0e0f................
0x5760c0060708090a0b0c0d0e0f0a0b0c0d0e0f................
0x5760d000010203040508090a0b0c0d0e0f0e0f................
0x5760e00203040508090a0b0c0d0e0f0c0d0e0f................
0x5760f00001040508090a0b0c0d0e0f0c0d0e0f................
0x576100040508090a0b0c0d0e0f0a0b0c0d0e0f................
0x5761100001020308090a0b0c0d0e0f0c0d0e0f................
0x576120020308090a0b0c0d0e0f0a0b0c0d0e0f................
0x576130000108090a0b0c0d0e0f0a0b0c0d0e0f................
0x57614008090a0b0c0d0e0f08090a0b0c0d0e0f................
0x57615000010203040506070a0b0c0d0e0f0e0f................
0x5761600203040506070a0b0c0d0e0f0c0d0e0f................
0x5761700001040506070a0b0c0d0e0f0c0d0e0f................
0x576180040506070a0b0c0d0e0f0a0b0c0d0e0f................
0x5761900001020306070a0b0c0d0e0f0c0d0e0f................
0x5761a0020306070a0b0c0d0e0f0a0b0c0d0e0f................
0x5761b0000106070a0b0c0d0e0f0a0b0c0d0e0f................
0x5761c006070a0b0c0d0e0f08090a0b0c0d0e0f................
0x5761d00001020304050a0b0c0d0e0f0c0d0e0f................
0x5761e0020304050a0b0c0d0e0f0a0b0c0d0e0f................
0x5761f0000104050a0b0c0d0e0f0a0b0c0d0e0f................
0x57620004050a0b0c0d0e0f08090a0b0c0d0e0f................
0x576210000102030a0b0c0d0e0f0a0b0c0d0e0f................
0x57622002030a0b0c0d0e0f08090a0b0c0d0e0f................
0x57623000010a0b0c0d0e0f08090a0b0c0d0e0f................
0x5762400a0b0c0d0e0f060708090a0b0c0d0e0f................
0x576250000102030405060708090c0d0e0f0e0f................
0x57626002030405060708090c0d0e0f0c0d0e0f................
0x57627000010405060708090c0d0e0f0c0d0e0f................
0x5762800405060708090c0d0e0f0a0b0c0d0e0f................
0x57629000010203060708090c0d0e0f0c0d0e0f................
0x5762a00203060708090c0d0e0f0a0b0c0d0e0f................
0x5762b00001060708090c0d0e0f0a0b0c0d0e0f................
Aim-assist or silent-aim cheat control 0x58d428–0x58d568
⋯3 more rows
0x58d45865640000000000004661696c65642074ed......Failed t
0x58d4686f2067656e6572617465206861726477o generate hardw
0x58d4786172652066696e6765727072696e7400are fingerprint.
0x58d48841696d626f74000041696d626f742043Aimbot..Aimbot C
0x58d4986f6e66696775726174696f6e00000000onfiguration....
0x58d4a8546f67676c652061696d626f74206f6eToggle aimbot on
0x58d4b82f6f666600000000456e61626c652041/off....Enable A
⋯11 more rows
Game combat-modification cheat controls 0x592290–0x5923c0
⋯5 more rows
0x5922e044726f7020737472656e677468000000Drop strength...
0x5922f052617069642066697265000000000000Rapid fire......
0x5923004e6f207265636f696c20287768696c65No recoil (while
0x5923102061696d696e67290000000000000000 aiming)........
⋯11 more rows
PE/MZ binary embedded in resource section 0x793558–0x7936d8
⋯7 more rows
0x7935c83c10ccbe97fa51cde8601714361f0000<.....Q..`..6...
0x7935d84d5a90000300000004000000ffff0000MZ..............
0x7935e8b8000000000000004000000000000000........@.......
0x7935f800000000000000000000000000000000................
⋯14 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.