General
- Target 2026-07-23_ee86d1e399a97e607dbf2049ab0bd943_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 471KB
- Sample260723-3qj4msdf38
- SHA256 d52e8f8bb91a9a3af77b946b005380ee69d1c1a5e3f29056a9a7503b0e68862e
- MD5 ee86d1e399a97e607dbf2049ab0bd943
- SHA1 fe0daca805b050cca63eea9b7434835db22d2250
- SHA512 3df816641c64848f4f9618ad4da34771e25e25d979ff4910dfe1cbe7b82443673457c1478a61a58dc9fcf4b5e0ce3c9241061cb4ac11eab816c9aafc194ef206
- SSDEEP 6144:o0n5Vippq0NAYHGJ5JhfIXJxhc82sR0Z2j77gbIOHFEcqc:V5VOR3HGJXeZo1sWg7SHFEu
- TLSH T182A45B5AE76405F9D0A7C178CD538503E7727C4A4770E69F03D09EA66E23690AF3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_ee86d1e399a97e607dbf2049ab0bd943_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_ee86d1e399a97e607dbf2049ab0bd943_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 471KB
- SHA256 d52e8f8bb91a9a3af77b946b005380ee69d1c1a5e3f29056a9a7503b0e68862e
- MD5 ee86d1e399a97e607dbf2049ab0bd943
- SHA1 fe0daca805b050cca63eea9b7434835db22d2250
- SHA512 3df816641c64848f4f9618ad4da34771e25e25d979ff4910dfe1cbe7b82443673457c1478a61a58dc9fcf4b5e0ce3c9241061cb4ac11eab816c9aafc194ef206
- SSDEEP 6144:o0n5Vippq0NAYHGJ5JhfIXJxhc82sR0Z2j77gbIOHFEcqc:V5VOR3HGJXeZo1sWg7SHFEu
- TLSH T182A45B5AE76405F9D0A7C178CD538503E7727C4A4770E69F03D09EA66E23690AF3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1