General
- Target 2026-05-12_815790904e1db2e601882abfad346918_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 767KB
- Sample260512-d87j8aes71
- SHA256 5b1ba8a585c22564186df808090d72d7b545d21e2c4464acb8aa1695e966e8c0
- MD5 815790904e1db2e601882abfad346918
- SHA1 4fe734ae7cbec75a267930de9367839b84c298ee
- SHA512 ef9e5271dd189dbd1a4fa86749c7943d251eec82be7d892b1ec4209edcc0d5c9d3cff5561f2fac8fd4ebe2a274198e83b32a0e9c97bf2eea0630115d7524ef3f
- SSDEEP 12288:qb5Hpg92Ojf14sHYOFYTPIP1LvM6ecgyxBlDetAqxSv:85Mjf19HwUdL07cgyb
- TLSH T1AEF47C1EE7A612F8D0B7C274CA428553E77278465370978F03E15AAA5F3B2905F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-12_815790904e1db2e601882abfad346918_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-12_815790904e1db2e601882abfad346918_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
NEW
C2
-
http://2.26.123.18
Attributes
-
url_path
/0f1da281ab93408e9369.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-05-12_815790904e1db2e601882abfad346918_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 767KB
- SHA256 5b1ba8a585c22564186df808090d72d7b545d21e2c4464acb8aa1695e966e8c0
- MD5 815790904e1db2e601882abfad346918
- SHA1 4fe734ae7cbec75a267930de9367839b84c298ee
- SHA512 ef9e5271dd189dbd1a4fa86749c7943d251eec82be7d892b1ec4209edcc0d5c9d3cff5561f2fac8fd4ebe2a274198e83b32a0e9c97bf2eea0630115d7524ef3f
- SSDEEP 12288:qb5Hpg92Ojf14sHYOFYTPIP1LvM6ecgyxBlDetAqxSv:85Mjf19HwUdL07cgyb
- TLSH T1AEF47C1EE7A612F8D0B7C274CA428553E77278465370978F03E15AAA5F3B2905F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10