General
- Target 2026-08-03_965cb95625bd0540bf755185e4db0713_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.1MB
- Sample260804-msx6aatwhw
- SHA256 7cd85d6505907948fc8fdf6f6f09697c03359222ac22b0cf6107adf29c27460b
- MD5 965cb95625bd0540bf755185e4db0713
- SHA1 956ce66dfd587a00de8c52c813e0b36646e533e4
- SHA512 e7efe73ef44b908dbce7d45922d18697f59fe456097d09ae73fbfec043d78b17b266395356dff754e916c29fcdd1e48380a2255e07369623b3bef81e71d6ab0b
- SSDEEP 24576:0yMEwnsbL9QGhkJqCJ59A5U/8iLCAp/qky30ti3n2pjVHk:0eh8qalv/4083n/
- TLSH T13F35AF0666A941FCD0BFA078E9566A07E739780607704EEF07D066663FA36E05FBE311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_965cb95625bd0540bf755185e4db0713_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_965cb95625bd0540bf755185e4db0713_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_965cb95625bd0540bf755185e4db0713_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.1MB
- SHA256 7cd85d6505907948fc8fdf6f6f09697c03359222ac22b0cf6107adf29c27460b
- MD5 965cb95625bd0540bf755185e4db0713
- SHA1 956ce66dfd587a00de8c52c813e0b36646e533e4
- SHA512 e7efe73ef44b908dbce7d45922d18697f59fe456097d09ae73fbfec043d78b17b266395356dff754e916c29fcdd1e48380a2255e07369623b3bef81e71d6ab0b
- SSDEEP 24576:0yMEwnsbL9QGhkJqCJ59A5U/8iLCAp/qky30ti3n2pjVHk:0eh8qalv/4083n/
- TLSH T13F35AF0666A941FCD0BFA078E9566A07E739780607704EEF07D066663FA36E05FBE311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.