General
- Target 2026-07-16_b0cfada7cbb60d8857fbc32680b5cf2d_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 397KB
- Sample260716-th885agy3k
- SHA256 58da24eca623c7897f71aadaa099658be04fd266316e57e6bd25caef241ced06
- MD5 b0cfada7cbb60d8857fbc32680b5cf2d
- SHA1 8d8effe6b49cfebe5cdbcfcb546316cf682d0516
- SHA512 0271f6ec9970cf5e60f796f9a473c92187d406031f285d5d9b529c611e27dd9efe0bc91427c949faa1ff61e9ce21a3657c79471f134556efd6f24038dc139467
- SSDEEP 6144:hR2Q1LdgbL08SBSX7PFOTPNJM4EOIKBge4AvmRx4d2Wl8Ye6rf:hRDLdU4kDkJMEIC4A1yY
- TLSH T1B8849E56EBA404F9E1BBD178C9638906EB727C590760A7CF23A406A61F33BD05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_b0cfada7cbb60d8857fbc32680b5cf2d_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_b0cfada7cbb60d8857fbc32680b5cf2d_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_b0cfada7cbb60d8857fbc32680b5cf2d_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 397KB
- SHA256 58da24eca623c7897f71aadaa099658be04fd266316e57e6bd25caef241ced06
- MD5 b0cfada7cbb60d8857fbc32680b5cf2d
- SHA1 8d8effe6b49cfebe5cdbcfcb546316cf682d0516
- SHA512 0271f6ec9970cf5e60f796f9a473c92187d406031f285d5d9b529c611e27dd9efe0bc91427c949faa1ff61e9ce21a3657c79471f134556efd6f24038dc139467
- SSDEEP 6144:hR2Q1LdgbL08SBSX7PFOTPNJM4EOIKBge4AvmRx4d2Wl8Ye6rf:hRDLdU4kDkJMEIC4A1yY
- TLSH T1B8849E56EBA404F9E1BBD178C9638906EB727C590760A7CF23A406A61F33BD05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1