General
- Target 2026-07-16_4d0a5212f75a80c5d46221a3db77c032_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 399KB
- Sample260716-tmpehsgz4n
- SHA256 dbc75ecebffa76533a78f6683c818bdb7fb9e4d24ce5ec5181f7bf9c43f80a54
- MD5 4d0a5212f75a80c5d46221a3db77c032
- SHA1 d418dc4e5febe89e6066f56d9a1c0b5a9bcc5bc0
- SHA512 0e65bd66eedc42ab9c01cba0e7747a88a971bd298559b85cfc480f175a534c6c14cd70ba2e7bec54a7799bb59e9a46dca87edd274f15c335fd5fcf9cb2fa1f99
- SSDEEP 12288:zQTVAvRmQ+Ao/OnZVcwjPAm889oygbN/:zeVAR0/MztK
- TLSH T18F949F56F7A400F5D1A7D178CA634502EB727C9947A0A7CF23A44AAA1F33BE05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_4d0a5212f75a80c5d46221a3db77c032_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_4d0a5212f75a80c5d46221a3db77c032_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_4d0a5212f75a80c5d46221a3db77c032_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 399KB
- SHA256 dbc75ecebffa76533a78f6683c818bdb7fb9e4d24ce5ec5181f7bf9c43f80a54
- MD5 4d0a5212f75a80c5d46221a3db77c032
- SHA1 d418dc4e5febe89e6066f56d9a1c0b5a9bcc5bc0
- SHA512 0e65bd66eedc42ab9c01cba0e7747a88a971bd298559b85cfc480f175a534c6c14cd70ba2e7bec54a7799bb59e9a46dca87edd274f15c335fd5fcf9cb2fa1f99
- SSDEEP 12288:zQTVAvRmQ+Ao/OnZVcwjPAm889oygbN/:zeVAR0/MztK
- TLSH T18F949F56F7A400F5D1A7D178CA634502EB727C9947A0A7CF23A44AAA1F33BE05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1