General
- Target 2026-07-03_b75e060a36077b7c16370e9ae9abb220_cobalt-strike_gazer_helldown_icedid_luca-stealer_njrat_remcos_ryuk
- Size 3.6MB
- Sample260703-a3q4hahs41
- SHA256 df5240bd2983e95c039e26f2db909ca2c831cb59210f8a35382063be35b51897
- MD5 b75e060a36077b7c16370e9ae9abb220
- SHA1 d5c8423593346d1ae8a5c8d983dd3e3cc77e76c7
- SHA512 f310643482843cad367ef338a8d6eb4495f60f3c3b2ff16a052dd5edb358efaf0e9cd3a0206c79529e52dcf619d11970b7d4ee4072e1832e3b1cb59332ee176f
- SSDEEP 49152:OCeetZqNHDfPul11rNGKL1BbX4cU2vQNABWvkc8v0Pss/6PAHMqbzm:Aegul11pJl/onuvEf6PAW
- TLSH T10806E11691D511F9C463C238CA8F1A0BF762B40A73699EDF02D549422F63FE29F7A319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_b75e060a36077b7c16370e9ae9abb220_cobalt-strike_gazer_helldown_icedid_luca-stealer_njrat_remcos_ryuk.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_b75e060a36077b7c16370e9ae9abb220_cobalt-strike_gazer_helldown_icedid_luca-stealer_njrat_remcos_ryuk.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_b75e060a36077b7c16370e9ae9abb220_cobalt-strike_gazer_helldown_icedid_luca-stealer_njrat_remcos_ryuk
- Size 3.6MB
- SHA256 df5240bd2983e95c039e26f2db909ca2c831cb59210f8a35382063be35b51897
- MD5 b75e060a36077b7c16370e9ae9abb220
- SHA1 d5c8423593346d1ae8a5c8d983dd3e3cc77e76c7
- SHA512 f310643482843cad367ef338a8d6eb4495f60f3c3b2ff16a052dd5edb358efaf0e9cd3a0206c79529e52dcf619d11970b7d4ee4072e1832e3b1cb59332ee176f
- SSDEEP 49152:OCeetZqNHDfPul11rNGKL1BbX4cU2vQNABWvkc8v0Pss/6PAHMqbzm:Aegul11pJl/onuvEf6PAW
- TLSH T10806E11691D511F9C463C238CA8F1A0BF762B40A73699EDF02D549422F63FE29F7A319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext