General
- Target 2026-06-28_0bf31541a268c80c7f838503155422fe_cobalt-strike_icedid_luca-stealer_njrat
- Size 3.3MB
- Sample260629-av41dsaw2l
- SHA256 1b15ba608ff6c9652ae8e615a92a309faa3ad5ab3e77edc145271264e95429e0
- MD5 0bf31541a268c80c7f838503155422fe
- SHA1 bc67a33fc5cc025e7e6dd45de7cc70fe04dbf12b
- SHA512 8408fdb89f165d03d547a1187c9589bcd16472ae93f69af09872fdefdf09b1c39ca4ac8bbf2621a5046f97944ee586417694847f4298235d1d054ada55e0bb0c
- SSDEEP 98304:JHngVvMHHEM0nmnM4aqTPKrbbXvYCp3nyG:VgxQE+M4aWyrbbTp3n
- TLSH T1DFF5BF50B2BB44DEE177C13495029B2AC6B1B7426233822F7015AE58EF777831D2DF6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_0bf31541a268c80c7f838503155422fe_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_0bf31541a268c80c7f838503155422fe_cobalt-strike_icedid_luca-stealer_njrat
- Size 3.3MB
- SHA256 1b15ba608ff6c9652ae8e615a92a309faa3ad5ab3e77edc145271264e95429e0
- MD5 0bf31541a268c80c7f838503155422fe
- SHA1 bc67a33fc5cc025e7e6dd45de7cc70fe04dbf12b
- SHA512 8408fdb89f165d03d547a1187c9589bcd16472ae93f69af09872fdefdf09b1c39ca4ac8bbf2621a5046f97944ee586417694847f4298235d1d054ada55e0bb0c
- SSDEEP 98304:JHngVvMHHEM0nmnM4aqTPKrbbXvYCp3nyG:VgxQE+M4aWyrbbTp3n
- TLSH T1DFF5BF50B2BB44DEE177C13495029B2AC6B1B7426233822F7015AE58EF777831D2DF6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1