General
- Target 2026-07-01_b3e11fa83e537c41d6f681921dc837d7_cobalt-strike_icedid_luca-stealer_njrat
- Size 374KB
- Sample260701-jsg8aaht8m
- SHA256 fea63d5fda3e0bca4cba0ed1e586252ab86b20052b7f566ea523f36ef1071347
- MD5 b3e11fa83e537c41d6f681921dc837d7
- SHA1 096bfceb9f4e89334ea3c1d71861dda4ae419fc4
- SHA512 9b438af3cfb797232cabbdc7fbea7309b301cc7d46add42ff99510f1c6ecaf08f258276a80cc1f10dc3a1eb48a39730e3ef36f27d155aa8dc23dd9956cf2a2f4
- SSDEEP 6144:Hu4GuvwnNBT+tWQbx8mkOcDWfMVGWQB+RZRG4:Hf3wnrT+tW4rkDWfc3bRZw4
- TLSH T12A849DD4B7E004B4F1B352B9C953C506E7B2B9628720C6CB03E4C6EA2F636E1553A779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_b3e11fa83e537c41d6f681921dc837d7_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_b3e11fa83e537c41d6f681921dc837d7_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_b3e11fa83e537c41d6f681921dc837d7_cobalt-strike_icedid_luca-stealer_njrat
- Size 374KB
- SHA256 fea63d5fda3e0bca4cba0ed1e586252ab86b20052b7f566ea523f36ef1071347
- MD5 b3e11fa83e537c41d6f681921dc837d7
- SHA1 096bfceb9f4e89334ea3c1d71861dda4ae419fc4
- SHA512 9b438af3cfb797232cabbdc7fbea7309b301cc7d46add42ff99510f1c6ecaf08f258276a80cc1f10dc3a1eb48a39730e3ef36f27d155aa8dc23dd9956cf2a2f4
- SSDEEP 6144:Hu4GuvwnNBT+tWQbx8mkOcDWfMVGWQB+RZRG4:Hf3wnrT+tW4rkDWfc3bRZw4
- TLSH T12A849DD4B7E004B4F1B352B9C953C506E7B2B9628720C6CB03E4C6EA2F636E1553A779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.