General
- Target 2026-07-05_54a7953c15a40b8dfcb6f5e768babc7e_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 418KB
- Sample260705-mbannaby4v
- SHA256 177fe0de667a4bf2a45a3b22e0e49f4244a80d94d8679238b98360370c625430
- MD5 54a7953c15a40b8dfcb6f5e768babc7e
- SHA1 5f5cf8106d4261066ba1df6281bd69d640d915c3
- SHA512 6597dcc238b9b92b664af4480f74973625f3b018153e892a3ca60d6b2d9f413229fe2593a148634d68d23f2412cd8f9e835617c520a10b5a5299bbde3c4425d1
- SSDEEP 6144:AmqtS5BwA4Bipt+5i37mzOHjum+31L7May6aT/x:5qgGi3YiAd31kr6
- TLSH T118948E16FBA440B9E567D138C9634506E7727C8A0370D6CF23A44A9A2F37FE45A3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_54a7953c15a40b8dfcb6f5e768babc7e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_54a7953c15a40b8dfcb6f5e768babc7e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_54a7953c15a40b8dfcb6f5e768babc7e_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 418KB
- SHA256 177fe0de667a4bf2a45a3b22e0e49f4244a80d94d8679238b98360370c625430
- MD5 54a7953c15a40b8dfcb6f5e768babc7e
- SHA1 5f5cf8106d4261066ba1df6281bd69d640d915c3
- SHA512 6597dcc238b9b92b664af4480f74973625f3b018153e892a3ca60d6b2d9f413229fe2593a148634d68d23f2412cd8f9e835617c520a10b5a5299bbde3c4425d1
- SSDEEP 6144:AmqtS5BwA4Bipt+5i37mzOHjum+31L7May6aT/x:5qgGi3YiAd31kr6
- TLSH T118948E16FBA440B9E567D138C9634506E7727C8A0370D6CF23A44A9A2F37FE45A3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.