General
- Target 2026-07-30_05ab87229832d2ca00526e2b5dd57698_cobalt-strike_icedid_luca-stealer_njrat
- Size 355KB
- Sample260730-nwzzqa1sav
- SHA256 d1d2a9bf8d44d4247b544ec77437312de41fd22b14ec2b16224b570693229e4f
- MD5 05ab87229832d2ca00526e2b5dd57698
- SHA1 5356abc3c90001f9c3b335b3a5f3dcc6e1a422de
- SHA512 64e8ab89ccf075a77ea945b08c26a8d0b73031877117112e6b65ca9ac75de01ac57c50dc0f3d2b5b4e02ef7f87fc1676583247bfd994d9c386d6f5a6973f1155
- SSDEEP 6144:FcTzj/a/rPoHK3uJknFtaMLdsY4ji8hLbokjzs7zvNOjVK:U/McK3uJknFtaMLC882OSY
- TLSH T159747D16EB9500F9D1A7D234C8664942DB72FC8A47A097CF03D44AA61F377E0AE3E752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_05ab87229832d2ca00526e2b5dd57698_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_05ab87229832d2ca00526e2b5dd57698_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_05ab87229832d2ca00526e2b5dd57698_cobalt-strike_icedid_luca-stealer_njrat
- Size 355KB
- SHA256 d1d2a9bf8d44d4247b544ec77437312de41fd22b14ec2b16224b570693229e4f
- MD5 05ab87229832d2ca00526e2b5dd57698
- SHA1 5356abc3c90001f9c3b335b3a5f3dcc6e1a422de
- SHA512 64e8ab89ccf075a77ea945b08c26a8d0b73031877117112e6b65ca9ac75de01ac57c50dc0f3d2b5b4e02ef7f87fc1676583247bfd994d9c386d6f5a6973f1155
- SSDEEP 6144:FcTzj/a/rPoHK3uJknFtaMLdsY4ji8hLbokjzs7zvNOjVK:U/McK3uJknFtaMLC882OSY
- TLSH T159747D16EB9500F9D1A7D234C8664942DB72FC8A47A097CF03D44AA61F377E0AE3E752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Detects executables referencing many IR and analysis tools