General
- Target 2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 849KB
- Sample260723-glv5fsem9s
- SHA256 585d762ad2e1de150df9ab288efdc4e91f3858ccec55e3a45ffb4e6d88d2af66
- MD5 7d6a2ae1cc08f66e98d21e21a51e70e3
- SHA1 3675e9a7b92129f21a9dc7a0147c7179d74e8fb2
- SHA512 00074b068c9377b38e32cf0311982564f93eb8957dccc08266e999129ff6070a8784b375fdd887212fddceebd2748c804159062591b2308d888d4b6da36b05d4
- SSDEEP 12288:VE6J8TG9MGfZ7iqt++Etguve1VBDcalbwyUPyiC0nJor1bj:m6J8T0J7iqI+pVBDcalbbiXnJe
- TLSH T19A05BF86F2B801F9D07B9139C5C6A61BEA723859076056DF13E446683FB36F05BBB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 849KB
- SHA256 585d762ad2e1de150df9ab288efdc4e91f3858ccec55e3a45ffb4e6d88d2af66
- MD5 7d6a2ae1cc08f66e98d21e21a51e70e3
- SHA1 3675e9a7b92129f21a9dc7a0147c7179d74e8fb2
- SHA512 00074b068c9377b38e32cf0311982564f93eb8957dccc08266e999129ff6070a8784b375fdd887212fddceebd2748c804159062591b2308d888d4b6da36b05d4
- SSDEEP 12288:VE6J8TG9MGfZ7iqt++Etguve1VBDcalbwyUPyiC0nJor1bj:m6J8T0J7iqI+pVBDcalbbiXnJe
- TLSH T19A05BF86F2B801F9D07B9139C5C6A61BEA723859076056DF13E446683FB36F05BBB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.