General
- Target 2026-07-31_ba2f42b4c9bd92a39bf98a5a29335d23_cobalt-strike_icedid_luca-stealer_njrat
- Size 433KB
- Sample260731-c4dwnst1ft
- SHA256 55b813d424324d9270ff15c0434e92280ff7575b7c16f82b2772e74adec3a3be
- MD5 ba2f42b4c9bd92a39bf98a5a29335d23
- SHA1 cb9e165eee5de138acff1c05d563c07aa11fa54e
- SHA512 db0ef22cc6e1e961e9ce34dc38eee55a7f9c9a50d32e8b4a62e792a832faddd1f685cc94d8ae8ea2e46a0a65a4cbfaeb3c9333f4e33807d1f14d1b5c50d7bb55
- SSDEEP 6144:qhJovVpHnTbf3h97It/2gSqpz/4OVsCWe/iXj7JwKtiSy2kt:3bf3vGFSqFwCWfTOKFy2
- TLSH T194947C06E6B506F9D9A3D57889465802E631BC4647B09FDF03E089A62F276E07F3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_ba2f42b4c9bd92a39bf98a5a29335d23_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_ba2f42b4c9bd92a39bf98a5a29335d23_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_ba2f42b4c9bd92a39bf98a5a29335d23_cobalt-strike_icedid_luca-stealer_njrat
- Size 433KB
- SHA256 55b813d424324d9270ff15c0434e92280ff7575b7c16f82b2772e74adec3a3be
- MD5 ba2f42b4c9bd92a39bf98a5a29335d23
- SHA1 cb9e165eee5de138acff1c05d563c07aa11fa54e
- SHA512 db0ef22cc6e1e961e9ce34dc38eee55a7f9c9a50d32e8b4a62e792a832faddd1f685cc94d8ae8ea2e46a0a65a4cbfaeb3c9333f4e33807d1f14d1b5c50d7bb55
- SSDEEP 6144:qhJovVpHnTbf3h97It/2gSqpz/4OVsCWe/iXj7JwKtiSy2kt:3bf3vGFSqFwCWfTOKFy2
- TLSH T194947C06E6B506F9D9A3D57889465802E631BC4647B09FDF03E089A62F276E07F3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key