General
- Target 2026-07-18_80bccd244081e6199c4194fe11258719_cobalt-strike_icedid_luca-stealer_njrat
- Size 866KB
- Sample260718-3scscah19x
- SHA256 17f653cd894a50b9ac4b555cff565234ae5d03f65b5628827a37cfe84cd7cd36
- MD5 80bccd244081e6199c4194fe11258719
- SHA1 abaf635b7ea76ee92eaae218bd744bca0bab14ee
- SHA512 ed468bb0f9e7ab79222d9432807f001c59bad741137624553d79d5af6f284e702f57b5b70263171ae3d284332733e2df69c32760830bbf6e9bd76e7ef76916cf
- SSDEEP 12288:ZrZu59OHiAb9kH6WPiG+rV4ZeA5hv/rSaWC+sYnrCdO:Z8sia9kH6Uj+rV4AAPNWvrnr
- TLSH T164155B1A979501F8E0E6C579CE878952D6B2780947705EFF03809DA77E2B6E08E3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_80bccd244081e6199c4194fe11258719_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_80bccd244081e6199c4194fe11258719_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_80bccd244081e6199c4194fe11258719_cobalt-strike_icedid_luca-stealer_njrat
- Size 866KB
- SHA256 17f653cd894a50b9ac4b555cff565234ae5d03f65b5628827a37cfe84cd7cd36
- MD5 80bccd244081e6199c4194fe11258719
- SHA1 abaf635b7ea76ee92eaae218bd744bca0bab14ee
- SHA512 ed468bb0f9e7ab79222d9432807f001c59bad741137624553d79d5af6f284e702f57b5b70263171ae3d284332733e2df69c32760830bbf6e9bd76e7ef76916cf
- SSDEEP 12288:ZrZu59OHiAb9kH6WPiG+rV4ZeA5hv/rSaWC+sYnrCdO:Z8sia9kH6Uj+rV4AAPNWvrnr
- TLSH T164155B1A979501F8E0E6C579CE878952D6B2780947705EFF03809DA77E2B6E08E3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.