General
- Target 2026-07-19_32988e3f2ee76bc56ecb50ca1fb4a02f_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 669KB
- Sample260719-cdpkgsht9l
- SHA256 06adb82af57b6be239684ce7867ad1d7d212678660068122290302b253b3b488
- MD5 32988e3f2ee76bc56ecb50ca1fb4a02f
- SHA1 d793326323366268bf9e908291b4bf51fba52c68
- SHA512 dc3cb63960d0983a538c70a5400ee31056f348186eb59a6957d2467e13ee4caf0c19982bb079e3b5286d834ca376db1b2de2cde4d2f250f670df8b27c69fd5f3
- SSDEEP 12288:R//vQJRd7WNbF4+rifmzSxVKTEHbM9yn+Jn3l48:Rf2d7WE+rirCTEHbYu8
- TLSH T168E47C16A7A414F9E9B7C13CCD934606EBB278150760D7CF07A046962F23BE19E3E762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_32988e3f2ee76bc56ecb50ca1fb4a02f_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_32988e3f2ee76bc56ecb50ca1fb4a02f_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_32988e3f2ee76bc56ecb50ca1fb4a02f_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 669KB
- SHA256 06adb82af57b6be239684ce7867ad1d7d212678660068122290302b253b3b488
- MD5 32988e3f2ee76bc56ecb50ca1fb4a02f
- SHA1 d793326323366268bf9e908291b4bf51fba52c68
- SHA512 dc3cb63960d0983a538c70a5400ee31056f348186eb59a6957d2467e13ee4caf0c19982bb079e3b5286d834ca376db1b2de2cde4d2f250f670df8b27c69fd5f3
- SSDEEP 12288:R//vQJRd7WNbF4+rifmzSxVKTEHbM9yn+Jn3l48:Rf2d7WE+rirCTEHbYu8
- TLSH T168E47C16A7A414F9E9B7C13CCD934606EBB278150760D7CF07A046962F23BE19E3E762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE