General
- Target 2026-07-18_37ed0cdbdc2979b1ca7521840a18b153_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 394KB
- Sample260718-vc6fqaf18p
- SHA256 6974483a22d100d048a21035a3fac063eab81ed374cee46d230fc3f5bf8ab33d
- MD5 37ed0cdbdc2979b1ca7521840a18b153
- SHA1 252b7cb97f82084322e622c758d9ac36f3de6019
- SHA512 bad9a170d761eb917092fc878dceea710316b6916aa6e6d737b9a813e2cf67dd7ad241df82c8cda23a500fe07786345e487e467dc5b4781be4bf1365c327827e
- SSDEEP 6144:VkTifSrnPBSY2OEajwHmyJ8r2TxunSwDe8AWl1YcjVA:VaifwErdJ8CxsDemDH
- TLSH T1D3849E55E7A400F9E1BBD178C9638906E7727C5907A0A7CF23A44AAA1F33BD05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_37ed0cdbdc2979b1ca7521840a18b153_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_37ed0cdbdc2979b1ca7521840a18b153_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_37ed0cdbdc2979b1ca7521840a18b153_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 394KB
- SHA256 6974483a22d100d048a21035a3fac063eab81ed374cee46d230fc3f5bf8ab33d
- MD5 37ed0cdbdc2979b1ca7521840a18b153
- SHA1 252b7cb97f82084322e622c758d9ac36f3de6019
- SHA512 bad9a170d761eb917092fc878dceea710316b6916aa6e6d737b9a813e2cf67dd7ad241df82c8cda23a500fe07786345e487e467dc5b4781be4bf1365c327827e
- SSDEEP 6144:VkTifSrnPBSY2OEajwHmyJ8r2TxunSwDe8AWl1YcjVA:VaifwErdJ8CxsDemDH
- TLSH T1D3849E55E7A400F9E1BBD178C9638906E7727C5907A0A7CF23A44AAA1F33BD05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1