General
- Target 2026-08-05_14ed112ea5b5c1b9b43ba799a8b1f693_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 152KB
- Sample260805-cmsy9swdmh
- SHA256 e78badad1a8fc889d199da55727f16c52173186342f7603b1744fb428b6ff526
- MD5 14ed112ea5b5c1b9b43ba799a8b1f693
- SHA1 63383eafee21b285a4e39117ae29bd0208de0910
- SHA512 1722f2586922ea011de715e031402891eea5c0987f240ce4bcf9072cc1197baed0bd8816a7dcce983ac63d33a9b4c7643e777a553411f214af2ad82eb51096ef
- SSDEEP 3072:MfZ5SK+NqefoUzmPPO+InPXBzJ4xaA+8R5:MjS7Nqe0XO/nPXMZ
- TLSH T1C8E34B1BB3A535F9E0778178C9A10A46F772783517609BEF07A047761F23AE09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_14ed112ea5b5c1b9b43ba799a8b1f693_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_14ed112ea5b5c1b9b43ba799a8b1f693_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_14ed112ea5b5c1b9b43ba799a8b1f693_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 152KB
- SHA256 e78badad1a8fc889d199da55727f16c52173186342f7603b1744fb428b6ff526
- MD5 14ed112ea5b5c1b9b43ba799a8b1f693
- SHA1 63383eafee21b285a4e39117ae29bd0208de0910
- SHA512 1722f2586922ea011de715e031402891eea5c0987f240ce4bcf9072cc1197baed0bd8816a7dcce983ac63d33a9b4c7643e777a553411f214af2ad82eb51096ef
- SSDEEP 3072:MfZ5SK+NqefoUzmPPO+InPXBzJ4xaA+8R5:MjS7Nqe0XO/nPXMZ
- TLSH T1C8E34B1BB3A535F9E0778178C9A10A46F772783517609BEF07A047761F23AE09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE