General
- Target 2026-07-01_6b8a636aa16933d15305990b60cd0660_cobalt-strike_icedid_luca-stealer_njrat
- Size 266KB
- Sample260701-17xd7aft2j
- SHA256 5085fc353dc0405ed76c22c755e7ec3f86f58f2b16573f4698e2e37833b278d7
- MD5 6b8a636aa16933d15305990b60cd0660
- SHA1 a60cd7a8dd3b8b7873867bc5ad4b344bbed836ea
- SHA512 bc5a5cb488174ad54cc9150caaf648d051e757c7da0305fdda9b607ada2d60a0fd4d0ce747b9c6e92672619b796b76278d3bf14299cd82e78e5e424ca6e70014
- SSDEEP 6144:J8K/9MBN0jwrlIP0B1/NXWMObKvlK8ZZU1NeS:FlSk6IsB1RRObKdKYZUuS
- TLSH T1DC44D09B77F131F9E0B7C23589A04606E732B87617609BEF13A443665F232D44D3AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_6b8a636aa16933d15305990b60cd0660_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_6b8a636aa16933d15305990b60cd0660_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_6b8a636aa16933d15305990b60cd0660_cobalt-strike_icedid_luca-stealer_njrat
- Size 266KB
- SHA256 5085fc353dc0405ed76c22c755e7ec3f86f58f2b16573f4698e2e37833b278d7
- MD5 6b8a636aa16933d15305990b60cd0660
- SHA1 a60cd7a8dd3b8b7873867bc5ad4b344bbed836ea
- SHA512 bc5a5cb488174ad54cc9150caaf648d051e757c7da0305fdda9b607ada2d60a0fd4d0ce747b9c6e92672619b796b76278d3bf14299cd82e78e5e424ca6e70014
- SSDEEP 6144:J8K/9MBN0jwrlIP0B1/NXWMObKvlK8ZZU1NeS:FlSk6IsB1RRObKdKYZUuS
- TLSH T1DC44D09B77F131F9E0B7C23589A04606E732B87617609BEF13A443665F232D44D3AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.