General
- Target 2026-07-11_3ae03cc5d16b2ef73f26039a973d6688_cobalt-strike_icedid_njrat_stealc
- Size 461KB
- Sample260711-hlde3sdt8j
- SHA256 83769aaf068dd33652aca913ce672fb40f037d4e67cf794441eed59fcfc82ddc
- MD5 3ae03cc5d16b2ef73f26039a973d6688
- SHA1 1803df4734d61b3c33786c08497d1270f7c093f7
- SHA512 4c6d0f288e33e714b92944167d643bd4329ffb54ec06cb9907a3c534d72aa1cdab74276ed40eaf224f424ef055696c21b96da75d05dda23451f645ecf05fdb4e
- SSDEEP 6144:oF65PrDLJN9329LFN+RqeolQIeuIzmv8rIGGEniPWcjIjm3l:oA5PrDp2N+QeUQVPzmoie8Ij
- TLSH T180A47D1BF7A500FAE1A7D278C8534905E772BC564760ABDF13A00A961F277E09E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_3ae03cc5d16b2ef73f26039a973d6688_cobalt-strike_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_3ae03cc5d16b2ef73f26039a973d6688_cobalt-strike_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_3ae03cc5d16b2ef73f26039a973d6688_cobalt-strike_icedid_njrat_stealc
- Size 461KB
- SHA256 83769aaf068dd33652aca913ce672fb40f037d4e67cf794441eed59fcfc82ddc
- MD5 3ae03cc5d16b2ef73f26039a973d6688
- SHA1 1803df4734d61b3c33786c08497d1270f7c093f7
- SHA512 4c6d0f288e33e714b92944167d643bd4329ffb54ec06cb9907a3c534d72aa1cdab74276ed40eaf224f424ef055696c21b96da75d05dda23451f645ecf05fdb4e
- SSDEEP 6144:oF65PrDLJN9329LFN+RqeolQIeuIzmv8rIGGEniPWcjIjm3l:oA5PrDp2N+QeUQVPzmoie8Ij
- TLSH T180A47D1BF7A500FAE1A7D278C8534905E772BC564760ABDF13A00A961F277E09E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.