General
- Target 2026-06-28_19515313d7e20c8bf8cf3953d44c9a30_cobalt-strike_icedid_luca-stealer_njrat
- Size 296KB
- Sample260629-af7sqsg151
- SHA256 44b11b11d8fdca571f6954b2f3e8c7ae0ddde5e58248751b1b68bc585e4224e8
- MD5 19515313d7e20c8bf8cf3953d44c9a30
- SHA1 c89e5a93b8df0e15c0bdd82c035dca050449c958
- SHA512 6d88605b0a44f8333265ba9216a7b4911004960932a0bfa4a748396ede953be3a09e8bb6c75d6096f76cda9f80d6321d59f676afc414c33a01f9810740866b99
- SSDEEP 6144:zqy2yH9XQD0l5Fdc2/7pHfGil4aXBcSF6/v:T2yH9+WxpHfG1qBcSF6/
- TLSH T130548D2AE6A514F9E1B7C678C9524905DBB3FC5247A0A7CF03904A972F236E09E3F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_19515313d7e20c8bf8cf3953d44c9a30_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_19515313d7e20c8bf8cf3953d44c9a30_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_19515313d7e20c8bf8cf3953d44c9a30_cobalt-strike_icedid_luca-stealer_njrat
- Size 296KB
- SHA256 44b11b11d8fdca571f6954b2f3e8c7ae0ddde5e58248751b1b68bc585e4224e8
- MD5 19515313d7e20c8bf8cf3953d44c9a30
- SHA1 c89e5a93b8df0e15c0bdd82c035dca050449c958
- SHA512 6d88605b0a44f8333265ba9216a7b4911004960932a0bfa4a748396ede953be3a09e8bb6c75d6096f76cda9f80d6321d59f676afc414c33a01f9810740866b99
- SSDEEP 6144:zqy2yH9XQD0l5Fdc2/7pHfGil4aXBcSF6/v:T2yH9+WxpHfG1qBcSF6/
- TLSH T130548D2AE6A514F9E1B7C678C9524905DBB3FC5247A0A7CF03904A972F236E09E3F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.