General
- Target 2026-07-08_10de7e4df5f6b6b0e3191fe7823da341_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 726KB
- Sample260708-l1f2asfs2j
- SHA256 f5691235801ed804c86075e3da77eb2b23ba7c5aa43fa3a1f036e7e41982c84e
- MD5 10de7e4df5f6b6b0e3191fe7823da341
- SHA1 01f2525fb15343cd92b7941d33a75fa1acbc66cf
- SHA512 732ce7b557d7b1e2e1e5a43fe6cc1f683da324140da5a3f7eb5a52bcb0b5b0173009305cbae2b7df6a760a5f78ea7f0ff3233cbae414cb31a5eb4f6fc68c4dcb
- SSDEEP 12288:Cq9xbAc1jH/9XvF6uPTrJer5f4IdHrh7k9GGK:CQbAWjH/9XvFJT9DGHruNK
- TLSH T10CF47E26A6A401FCE0B7C179CE464953F7B2780913B16EDF07D04AA61E276E49F3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
7 signatures
Behavioral task
behavioral1
Sample
2026-07-08_10de7e4df5f6b6b0e3191fe7823da341_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_10de7e4df5f6b6b0e3191fe7823da341_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_10de7e4df5f6b6b0e3191fe7823da341_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 726KB
- SHA256 f5691235801ed804c86075e3da77eb2b23ba7c5aa43fa3a1f036e7e41982c84e
- MD5 10de7e4df5f6b6b0e3191fe7823da341
- SHA1 01f2525fb15343cd92b7941d33a75fa1acbc66cf
- SHA512 732ce7b557d7b1e2e1e5a43fe6cc1f683da324140da5a3f7eb5a52bcb0b5b0173009305cbae2b7df6a760a5f78ea7f0ff3233cbae414cb31a5eb4f6fc68c4dcb
- SSDEEP 12288:Cq9xbAc1jH/9XvF6uPTrJer5f4IdHrh7k9GGK:CQbAWjH/9XvFJT9DGHruNK
- TLSH T10CF47E26A6A401FCE0B7C179CE464953F7B2780913B16EDF07D04AA61E276E49F3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates processes with tasklist