Overview

overview

8

Static

static

3

2026-06-01...lc.exe

windows10-2004-x64

8

2026-06-01...lc.exe

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-06-01_e8b3d7afbbbae079e7ae087ef8fd7320_cobalt-strike_icedid_luca-stealer_njrat_stealc
  • Size 312KB
  • Sample260601-2vsqxaas2q
  • SHA256 07115cd8706ebd3bfaebec2d521fcf51a4bb2979d5bdd10b563be93ea1743362
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
persistence

Malware Config

Targets

    • Target
      2026-06-01_e8b3d7afbbbae079e7ae087ef8fd7320_cobalt-strike_icedid_luca-stealer_njrat_stealc
    • Size 312KB
    • SHA256 07115cd8706ebd3bfaebec2d521fcf51a4bb2979d5bdd10b563be93ea1743362
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks