Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/05/2026, 02:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target 2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe
- Size 225KB
- Sample260528-dbmtjses2l
- SHA256 d59dbee83c1a05a404679c9d51e7c481f4ada048b22ea24e9fb21c5ff1795d99
- MD5 d7d924992835c1a1bebbe65d71e28ebe
- SHA1 dca833b89dbba4ddeb654b47cb66ab6766c8a10e
- SHA512 44da17d71a35cb4c9429f8fb36c6fd010c71e841c308965a0678d8a2dd3d517090096e3eab58de0edc80198a025bf8549a71ed988416802414ec56c0ce19af32
- SSDEEP 3072:ZRdODbOh9GfQ1j6YhOuQgmuJPPHYmuBZ3b3QPhfiiasrnD:ZRdxphO+pPWf3FiaeD
- TLSH T1A9343806F3F610E9E5B7D23985622626F67378150730AADF43600B769F23AE0AD3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2512 2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2512 2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe 2512 2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2512 2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-28_d7d924992835c1a1bebbe65d71e28ebe_cobalt-strike_icedid_luca-stealer_nightshadec2_njrat.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2512