General
- Target 2026-07-18_b7064f1b55c0138ba9347a5a1fceb6f7_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 395KB
- Sample260718-mlb98sbx8y
- SHA256 f8e77d7f331e3a14f8aee7801925c4cadb6f1178f0447b1a69a5458075f742fc
- MD5 b7064f1b55c0138ba9347a5a1fceb6f7
- SHA1 0466be050ccc92d2d234089841111b75f3cdd3f5
- SHA512 376dc2fb083e16bdab8bf3ed36c063e2e32180266c8c8254862376902770eecb61ea71fddd0c4caa30a0ecf0db2a46304d8f3271e4211f2cfcc6f4f03119bba6
- SSDEEP 6144:sBjq5ufcoQB1heOmFq174aayluH2IIBPWl1YJT1:sFAuSLAm7407IIMD
- TLSH T17A849F55E7A404F9E1BBD178C9634906E7727C5907A0A7CF23A40A9A1F33BE05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_b7064f1b55c0138ba9347a5a1fceb6f7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_b7064f1b55c0138ba9347a5a1fceb6f7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_b7064f1b55c0138ba9347a5a1fceb6f7_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 395KB
- SHA256 f8e77d7f331e3a14f8aee7801925c4cadb6f1178f0447b1a69a5458075f742fc
- MD5 b7064f1b55c0138ba9347a5a1fceb6f7
- SHA1 0466be050ccc92d2d234089841111b75f3cdd3f5
- SHA512 376dc2fb083e16bdab8bf3ed36c063e2e32180266c8c8254862376902770eecb61ea71fddd0c4caa30a0ecf0db2a46304d8f3271e4211f2cfcc6f4f03119bba6
- SSDEEP 6144:sBjq5ufcoQB1heOmFq174aayluH2IIBPWl1YJT1:sFAuSLAm7407IIMD
- TLSH T17A849F55E7A404F9E1BBD178C9634906E7727C5907A0A7CF23A40A9A1F33BE05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1