General
- Target 2026-07-15_80d8f3ac6d4047d2eeab3ee5cc9e2dcb_cobalt-strike_icedid_njrat_stealc
- Size 347KB
- Sample260715-ltlcfagz2k
- SHA256 989d177851ee8861ca4918d4aef4989a622f7216073bb70d52255b3490b6518a
- MD5 80d8f3ac6d4047d2eeab3ee5cc9e2dcb
- SHA1 369cded3df0f68520347f22fb1ce6634e316c016
- SHA512 6585908d478ae97450a3a677c37fd2399054ea9cf6c987e7d55cbb7396f552d405aeb2548d757dc302b047055de30bf4b9847b8b18472ee5b746c1a3b8a191ba
- SSDEEP 6144:Qo9MDrYyOXVMVzzK1s6I6SXq3R5dJpdojWM/h0P1zir2vYycSp+qZO2P:Q5xzK1s72dVojWgKPJir4p+F2P
- TLSH T1B3743B3AEB8009BCE0B6C275CE568951EB357C4E03F299EF17D048A16D536A19E3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_80d8f3ac6d4047d2eeab3ee5cc9e2dcb_cobalt-strike_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_80d8f3ac6d4047d2eeab3ee5cc9e2dcb_cobalt-strike_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_80d8f3ac6d4047d2eeab3ee5cc9e2dcb_cobalt-strike_icedid_njrat_stealc
- Size 347KB
- SHA256 989d177851ee8861ca4918d4aef4989a622f7216073bb70d52255b3490b6518a
- MD5 80d8f3ac6d4047d2eeab3ee5cc9e2dcb
- SHA1 369cded3df0f68520347f22fb1ce6634e316c016
- SHA512 6585908d478ae97450a3a677c37fd2399054ea9cf6c987e7d55cbb7396f552d405aeb2548d757dc302b047055de30bf4b9847b8b18472ee5b746c1a3b8a191ba
- SSDEEP 6144:Qo9MDrYyOXVMVzzK1s6I6SXq3R5dJpdojWM/h0P1zir2vYycSp+qZO2P:Q5xzK1s72dVojWgKPJir4p+F2P
- TLSH T1B3743B3AEB8009BCE0B6C275CE568951EB357C4E03F299EF17D048A16D536A19E3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Event Triggered Execution: Image File Execution Options Injection
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Scheduled Task/Job
1Scheduled Task
1