General
- Target 2026-08-07_2e710932709f780ca31c2ff3780436e5_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 713KB
- Sample260808-b2ngnazydw
- SHA256 2b9d8b397b905a328b305d5a38b717e1a870b7239ae8c904333888d2826bbb24
- MD5 2e710932709f780ca31c2ff3780436e5
- SHA1 b02bb22215b4b35b690718c1ab0854ba4dbba17f
- SHA512 a41f4f21f9ea6634a01a9a2f6fc68986b7d04eb78d0e1a0014cef7c47eb8255c0656f954f553b2c19ca3346ec7a3dab845fe9a24e2de4afccbf6929eb7c44afd
- SSDEEP 12288:HmiGNS5NeJz3vD9zkWM/LMbObHWzVnVlB1P3R9fW9ahd:Hmy5NchkWM+1PhNH
- TLSH T130F46C27938402FDE0A6D27A8E969961F736B80A07E1AACF13D045631F671E45F3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2e710932709f780ca31c2ff3780436e5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_2e710932709f780ca31c2ff3780436e5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2e710932709f780ca31c2ff3780436e5_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 713KB
- SHA256 2b9d8b397b905a328b305d5a38b717e1a870b7239ae8c904333888d2826bbb24
- MD5 2e710932709f780ca31c2ff3780436e5
- SHA1 b02bb22215b4b35b690718c1ab0854ba4dbba17f
- SHA512 a41f4f21f9ea6634a01a9a2f6fc68986b7d04eb78d0e1a0014cef7c47eb8255c0656f954f553b2c19ca3346ec7a3dab845fe9a24e2de4afccbf6929eb7c44afd
- SSDEEP 12288:HmiGNS5NeJz3vD9zkWM/LMbObHWzVnVlB1P3R9fW9ahd:Hmy5NchkWM+1PhNH
- TLSH T130F46C27938402FDE0A6D27A8E969961F736B80A07E1AACF13D045631F671E45F3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Deletes itself
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.