General
- Target 2026-07-09_cf6b94153a24a7bd16bb7229f8563980_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 414KB
- Sample260709-d88ghsc18x
- SHA256 e4e58b2fb490af7401a7b5a46eb6d32b9dbb920d6d5765d6105021623260a8a8
- MD5 cf6b94153a24a7bd16bb7229f8563980
- SHA1 e65d7f6630ff28e178917f1b54f6b16084d7d340
- SHA512 0a3da6b3364c7a32aa5e672c33ec3ad19e64368635b0d29be0d3689fc7bb82430234579de06eacefbcbe0831a1054e305d3a78abc4042d53290d1acf7985fe44
- SSDEEP 6144:OFHktkLQz4znmPL25E0h4HhU8sva7Rftph0lhSMXlBXBWnTset2G:ST5E0hDkRFph0lhSMXliTsetj
- TLSH T11894AD01B7E590F9E16786748CA60A45EB337C450791EADF03AC99A25F33AD05E3EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_cf6b94153a24a7bd16bb7229f8563980_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_cf6b94153a24a7bd16bb7229f8563980_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_cf6b94153a24a7bd16bb7229f8563980_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 414KB
- SHA256 e4e58b2fb490af7401a7b5a46eb6d32b9dbb920d6d5765d6105021623260a8a8
- MD5 cf6b94153a24a7bd16bb7229f8563980
- SHA1 e65d7f6630ff28e178917f1b54f6b16084d7d340
- SHA512 0a3da6b3364c7a32aa5e672c33ec3ad19e64368635b0d29be0d3689fc7bb82430234579de06eacefbcbe0831a1054e305d3a78abc4042d53290d1acf7985fe44
- SSDEEP 6144:OFHktkLQz4znmPL25E0h4HhU8sva7Rftph0lhSMXlBXBWnTset2G:ST5E0hDkRFph0lhSMXliTsetj
- TLSH T11894AD01B7E590F9E16786748CA60A45EB337C450791EADF03AC99A25F33AD05E3EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.