General
- Target 2026-05-28_93a29975d3cc283c8393c8dcb1ff2d09_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.1MB
- Sample260528-mb7ndset6x
- SHA256 972005ffdf8d40f29e45623e47af287c1b2fe4f23028ffe0beafd222fa29e4b8
- MD5 93a29975d3cc283c8393c8dcb1ff2d09
- SHA1 5b0b6f1cdd78816c337979602903059fd7e5f81d
- SHA512 de3af135f0dfcbce18a415983c4335f96d91ad47c079d22a090c84c1e04d0c88fa76ef92aa3f35aa0fd94ef3ea3dee0422dd121338ab0cc896a322e54efc6e24
- SSDEEP 12288:rn5YovCWAw6nc9+w0VxTALfkw7MXbGPKQljbxUp1PscSbjkPEH:rneovAwuxTALfkOMXb4hlnxUfPsAEH
- TLSH T1EF35AE43F6E641FDD1BB9578C9294357E775B40A03204EEB83E49AA52F13AE84F39342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_93a29975d3cc283c8393c8dcb1ff2d09_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_93a29975d3cc283c8393c8dcb1ff2d09_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_93a29975d3cc283c8393c8dcb1ff2d09_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.1MB
- SHA256 972005ffdf8d40f29e45623e47af287c1b2fe4f23028ffe0beafd222fa29e4b8
- MD5 93a29975d3cc283c8393c8dcb1ff2d09
- SHA1 5b0b6f1cdd78816c337979602903059fd7e5f81d
- SHA512 de3af135f0dfcbce18a415983c4335f96d91ad47c079d22a090c84c1e04d0c88fa76ef92aa3f35aa0fd94ef3ea3dee0422dd121338ab0cc896a322e54efc6e24
- SSDEEP 12288:rn5YovCWAw6nc9+w0VxTALfkw7MXbGPKQljbxUp1PscSbjkPEH:rneovAwuxTALfkOMXb4hlnxUfPsAEH
- TLSH T1EF35AE43F6E641FDD1BB9578C9294357E775B40A03204EEB83E49AA52F13AE84F39342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.