General
- Target 2026-07-06_ed03ad9694afae928dab1096f3a8221b_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 642KB
- Sample260707-afe3qady5t
- SHA256 2af09d0cdfbdd32dd56d453727f05dc8fbc4abc37347174d1195bedec0acde3f
- MD5 ed03ad9694afae928dab1096f3a8221b
- SHA1 be4e02dbd1cd63abba60f9b084231c485ac03dc9
- SHA512 17b882f5c8db894825ef832a1e4254263d4d9c57f3e77eb8ce2c81b6b37d60fa36bd8207371c129bf6a606814ef720d6ccfc0bb379846bcc35ed330d7ffdda99
- SSDEEP 12288:STh7pJStE5CIVCHAkuop2ovXbkLyVl+CynmBQr:sh7Dj5CIVs7uop2ovXbCCynm0
- TLSH T123E4AE15B2E405F8E0BB9236C565A32BE736780607318BDB13E416692F777D04EBBB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ed03ad9694afae928dab1096f3a8221b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ed03ad9694afae928dab1096f3a8221b_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ed03ad9694afae928dab1096f3a8221b_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 642KB
- SHA256 2af09d0cdfbdd32dd56d453727f05dc8fbc4abc37347174d1195bedec0acde3f
- MD5 ed03ad9694afae928dab1096f3a8221b
- SHA1 be4e02dbd1cd63abba60f9b084231c485ac03dc9
- SHA512 17b882f5c8db894825ef832a1e4254263d4d9c57f3e77eb8ce2c81b6b37d60fa36bd8207371c129bf6a606814ef720d6ccfc0bb379846bcc35ed330d7ffdda99
- SSDEEP 12288:STh7pJStE5CIVCHAkuop2ovXbkLyVl+CynmBQr:sh7Dj5CIVs7uop2ovXbCCynm0
- TLSH T123E4AE15B2E405F8E0BB9236C565A32BE736780607318BDB13E416692F777D04EBBB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.