General
- Target 2026-06-30_ba6f3979c19e760976c872f4bb074347_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 304KB
- Sample260701-dmyeese16s
- SHA256 a82097ac215f4e9aa235aec28a6c0b16842ab50adeadd5d5edda8fea508721be
- MD5 ba6f3979c19e760976c872f4bb074347
- SHA1 e25e6cceda2d3042ce9c8139d785975c2923be36
- SHA512 92755620b70d63f1fa3478bbdd7faa6c6e3269ac01f97cbe12bdc4c52d1bd84144803769d9e160b2f23fbd41bcc4244ecab43010120128a04cad9c91026d4fdf
- SSDEEP 6144:RylAUWCfHfr3zXYGUZYhpLEyPmrGZ9/BCi:Z+PTmYhpnuCJCi
- TLSH T153648E2AE79510F9E9BB913CCD425946EB727C5607B1DBCF03A04A562F236E04E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-30_ba6f3979c19e760976c872f4bb074347_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_ba6f3979c19e760976c872f4bb074347_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_ba6f3979c19e760976c872f4bb074347_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 304KB
- SHA256 a82097ac215f4e9aa235aec28a6c0b16842ab50adeadd5d5edda8fea508721be
- MD5 ba6f3979c19e760976c872f4bb074347
- SHA1 e25e6cceda2d3042ce9c8139d785975c2923be36
- SHA512 92755620b70d63f1fa3478bbdd7faa6c6e3269ac01f97cbe12bdc4c52d1bd84144803769d9e160b2f23fbd41bcc4244ecab43010120128a04cad9c91026d4fdf
- SSDEEP 6144:RylAUWCfHfr3zXYGUZYhpLEyPmrGZ9/BCi:Z+PTmYhpnuCJCi
- TLSH T153648E2AE79510F9E9BB913CCD425946EB727C5607B1DBCF03A04A562F236E04E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.