General
- Target 2026-07-17_ac5b53d4a42116e404d66a5b20a5ebc8_cobalt-strike_icedid_njrat_stealc
- Size 376KB
- Sample260717-1emdhsav6v
- SHA256 6539ffa8e4d38538eb37d86479f29cfdbb15e154e29fd64054ba9d6b7752b4f1
- MD5 ac5b53d4a42116e404d66a5b20a5ebc8
- SHA1 4fd8cb1e33a7c24a53e7044317a56ede345d5850
- SHA512 da75736bfec5f34df7bb25a9da403be80c6b9176c6e6ab929bdce9c6b589c3e42eb773ed22f2f509e056041605251b43c8116b1556d58c762d3cd7651219092d
- SSDEEP 6144:e6Gc1crmI6N5ko2dA24wqYFCZyKo7y5LSUnkS38ox7DoRUJ6J:5MZW24w/CZJ5GUkYxKs
- TLSH T17B848E1AFAA400F5E56BC538CDA20502EB32BCCE4761DBDF13A549961F23AE09E3D751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_ac5b53d4a42116e404d66a5b20a5ebc8_cobalt-strike_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_ac5b53d4a42116e404d66a5b20a5ebc8_cobalt-strike_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ac5b53d4a42116e404d66a5b20a5ebc8_cobalt-strike_icedid_njrat_stealc
- Size 376KB
- SHA256 6539ffa8e4d38538eb37d86479f29cfdbb15e154e29fd64054ba9d6b7752b4f1
- MD5 ac5b53d4a42116e404d66a5b20a5ebc8
- SHA1 4fd8cb1e33a7c24a53e7044317a56ede345d5850
- SHA512 da75736bfec5f34df7bb25a9da403be80c6b9176c6e6ab929bdce9c6b589c3e42eb773ed22f2f509e056041605251b43c8116b1556d58c762d3cd7651219092d
- SSDEEP 6144:e6Gc1crmI6N5ko2dA24wqYFCZyKo7y5LSUnkS38ox7DoRUJ6J:5MZW24w/CZJ5GUkYxKs
- TLSH T17B848E1AFAA400F5E56BC538CDA20502EB32BCCE4761DBDF13A549961F23AE09E3D751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Server Software Component: Terminal Services DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.