General
- Target 2026-07-26_32a6f677fc222535a69e175ecfe250b3_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 911KB
- Sample260726-1t935asarh
- SHA256 7eada5d3712ce19117b7fceb436aa7aeec21b9be82bf5580cd99bf21685ec649
- MD5 32a6f677fc222535a69e175ecfe250b3
- SHA1 1fcb0fcfe55f8b22f372a84284a9297757b673d1
- SHA512 ab53266c6bc8e26157ef9e3b661a762cb1d97daea2ac4dd838a109cea54d058b256df70ad640aee06f3b5aabfd7fda6b3a5ee66839b0f2804947fdf2fbb876ac
- SSDEEP 12288:KFX7Xn1npUxaTJi+REtMfgQ16FMVH9K8bjNQUvwqi0+5nHwCAkD:U7XnnlEtm62VdK8bjNrvGs
- TLSH T10D159DC256B6D8E8C037A0B59152FA3963A12C631E11BEE7CBD48E63BC077E16537708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-26_32a6f677fc222535a69e175ecfe250b3_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_32a6f677fc222535a69e175ecfe250b3_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_32a6f677fc222535a69e175ecfe250b3_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 911KB
- SHA256 7eada5d3712ce19117b7fceb436aa7aeec21b9be82bf5580cd99bf21685ec649
- MD5 32a6f677fc222535a69e175ecfe250b3
- SHA1 1fcb0fcfe55f8b22f372a84284a9297757b673d1
- SHA512 ab53266c6bc8e26157ef9e3b661a762cb1d97daea2ac4dd838a109cea54d058b256df70ad640aee06f3b5aabfd7fda6b3a5ee66839b0f2804947fdf2fbb876ac
- SSDEEP 12288:KFX7Xn1npUxaTJi+REtMfgQ16FMVH9K8bjNQUvwqi0+5nHwCAkD:U7XnnlEtm62VdK8bjNrvGs
- TLSH T10D159DC256B6D8E8C037A0B59152FA3963A12C631E11BEE7CBD48E63BC077E16537708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.