Overview

overview

10

Static

static

10

2026-07-09...lc.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-09_b73bcf22ad3f733c76af5dcdf8fd26b1_cobalt-strike_icedid_luca-stealer_njrat_stealc
  • Size 797KB
  • Sample260709-cb2r2acv8v
  • SHA256 2068e960207fda96211e3f7313fb4cf768a97ed8ce8ead1178e3ae230828c7e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Detects executables using Telegram Chat Bot 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-07-09_b73bcf22ad3f733c76af5dcdf8fd26b1_cobalt-strike_icedid_luca-stealer_njrat_stealc
    .exe 797KB

2026-07-09_b73bcf22ad3f733c76af5dcdf8fd26b1_cobalt-strike_icedid_luca-stealer_njrat_stealc

  • IMPHASH 5d0426b8b73f60e8792a1dd05818c495
  • SHA256 2068e960207fda96211e3f7313fb4cf768a97ed8ce8ead1178e3ae230828c7e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:10windowsx64arch:x64

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

  • Detects executables Discord URL observed in first stage droppers

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

  • Detects executables containing URLs to raw contents of a Github gist

  • Detects executables using Telegram Chat Bot

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
8b:35:67:c0:75:28:12:03:b5:81:27:2f:4d:cc:aa:fe:c6:ff:69:bf:a8:a9:51:c5:ad:9d:41:38:76:b8:21:6f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=WindowsSystemHelper,O=Microsoft Corporation
Minor OS version
0
Major OS version
10
Entry point
366280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths