General

  • Target
    2026-07-17_ea47a12d63d195dab6032472324c508f_cobalt-strike_icedid_luca-stealer_njrat_stealc
  • Size 552KB
  • Sample260717-tw2ffaft9p
  • SHA256 4c2b522bd6d4c4cdb31f0a0f5dae6d2f163c4b63da3ee585e5c26effaa07b623
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-07-17_ea47a12d63d195dab6032472324c508f_cobalt-strike_icedid_luca-stealer_njrat_stealc
    .exe 552KB

2026-07-17_ea47a12d63d195dab6032472324c508f_cobalt-strike_icedid_luca-stealer_njrat_stealc

  • IMPHASH ac50404b792073557062d21d8d39618b
  • SHA256 4c2b522bd6d4c4cdb31f0a0f5dae6d2f163c4b63da3ee585e5c26effaa07b623
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
89:da:70:ef:cc:c7:f5:bb:0c:70:5d:aa:e4:e2:b2:74:2a:24:a4:60:ce:a3:74:80:9e:56:f6:57:69:75:58:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=515636181,CN=FAST CORPORATION LTD,O=FAST CORPORATION LTD,L=Ra'anana,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c
Minor OS version
0
Major OS version
6
Entry point
128132
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Build\Build_2040_D20260225T165711\fa_rss\Release\AppStoreSRV.pdb