Extracted

• • Target
    2026-08-01_bfca449fc6fa173db931d766352cf654_cobalt-strike_icedid_luca-stealer_njrat
  • Size 171KB
  • SHA256 a3c26408baf012b81e99ce24c76cb279a4d0d14de41a7fbad5f17fc8e95336fe
  • MD5 bfca449fc6fa173db931d766352cf654
  • SHA1 16c1354b9632640f909211bbdb07e199ae44fe6b
  • SHA512 2f49f82f0a8ac02db1c82ef03ea329d9b14086440faba4d69e5768f21d3a5c2c98ed70c2b77215d4918b391fb72dcae804faafd8d8d06d0d2e99857c2e66c5be
  • SSDEEP 3072:hIbM+reT257nEjVmB054CdK9Z98LIOPdi3kU4ztYKZq:+M+iQLEjMB0SX8IOPqCZq
  • TLSH
    T1B7046D4A72AA90FDE1B79134C9521906E77174150320AFFF43E487B69F63AD0AE3EB11
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2