General
- Target 2026-07-02_ac4b7d1d78a82faa9baef674990c37bc_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 599KB
- Sample260702-ls5ppadz2m
- SHA256 df78fdc4a97f81307d0f335e9af3ffbce422a7e1557f4cadf5851c2c68673770
- MD5 ac4b7d1d78a82faa9baef674990c37bc
- SHA1 3fb91b418bb14bc2a4df6e3137a589f70d65c2bb
- SHA512 5c86b760704c46d4913ebc7a38907ea48c07dc5d8dcaac3251250c9a0caec252e00856cf3d946c222f810587ca39de8691705b12e6c8d0ce25f7031479878029
- SSDEEP 12288:w3U5gb4zIKZAdXMlLoHph0lhSMXl+VPYmE8:wkWbMKdXMqJh0lhSMXlaPYmE8
- TLSH T1E4D48C1AB7E941F8E5BAC1788892562AFA737C86439067CB13907A571F736E04F3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_ac4b7d1d78a82faa9baef674990c37bc_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_ac4b7d1d78a82faa9baef674990c37bc_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_ac4b7d1d78a82faa9baef674990c37bc_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 599KB
- SHA256 df78fdc4a97f81307d0f335e9af3ffbce422a7e1557f4cadf5851c2c68673770
- MD5 ac4b7d1d78a82faa9baef674990c37bc
- SHA1 3fb91b418bb14bc2a4df6e3137a589f70d65c2bb
- SHA512 5c86b760704c46d4913ebc7a38907ea48c07dc5d8dcaac3251250c9a0caec252e00856cf3d946c222f810587ca39de8691705b12e6c8d0ce25f7031479878029
- SSDEEP 12288:w3U5gb4zIKZAdXMlLoHph0lhSMXl+VPYmE8:wkWbMKdXMqJh0lhSMXlaPYmE8
- TLSH T1E4D48C1AB7E941F8E5BAC1788892562AFA737C86439067CB13907A571F736E04F3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.