a50da6a813f0672680f348ced6d86393db017b415793ae1709139dd2375d88d7

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/04/2026, 04:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-24_1abee28912d4da7bb5687826943cf63c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 246KB
Sample260424-eykhdaex5w
SHA256 a50da6a813f0672680f348ced6d86393db017b415793ae1709139dd2375d88d7
MD5 1abee28912d4da7bb5687826943cf63c
SHA1 a0d262391ca92260d7497a8dd890626b3cdbd68d
SHA512 9a8cdb2048eebf3ce1dea8b1ba2fe5c4cac4d6fe966cbf9bf35157d11e6b3bff991bfc6d13fe2e40bf0f764e64488e07f0c65104b484e5fcf59594f7d4024e2a
SSDEEP 3072:LqGMr32j6ml+iPcKzc0QHJcqTgf/3j5L1Uus1SYfFQAPb6mecs2A1NNSVUW2l:L2b2hEgQHaqcj741Ge5gNhxl
TLSH
T178345A4A77E508F9E9B7813D8991550AFAB17C520770DBCF0390866A5F23BE0AD3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	2026-04-24_1abee28912d4da7bb5687826943cf63c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	2026-04-24_1abee28912d4da7bb5687826943cf63c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-24_1abee28912d4da7bb5687826943cf63c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-24_1abee28912d4da7bb5687826943cf63c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Checks processor information in registry
PID:3212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads