General
- Target 2026-08-07_1b04f2677270adc0f57606b82d2ddfab_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- Sample260808-b8b27sfp3s
- SHA256 6a521af0a945cdadf29673e929e99e828202f4ff555d7d8d19c615dd65e5bc33
- MD5 1b04f2677270adc0f57606b82d2ddfab
- SHA1 0006fd83c9670377275be8a0f04837e6c06a72b3
- SHA512 d472f364240228666f5cbf782a081d78b7cdbcca0bb65308d5775fb6b039af6add6a9d641780bfc4a7e4833a4d1eb722fe95a81969c3bfe105d28d2dfd720bc1
- SSDEEP 24576:5pXA46QoRbeIzW4iEZ31m2Rx2+siA/s8:5peDiEB1vRYd/
- TLSH T1D115F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-07_1b04f2677270adc0f57606b82d2ddfab_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_1b04f2677270adc0f57606b82d2ddfab_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_1b04f2677270adc0f57606b82d2ddfab_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- SHA256 6a521af0a945cdadf29673e929e99e828202f4ff555d7d8d19c615dd65e5bc33
- MD5 1b04f2677270adc0f57606b82d2ddfab
- SHA1 0006fd83c9670377275be8a0f04837e6c06a72b3
- SHA512 d472f364240228666f5cbf782a081d78b7cdbcca0bb65308d5775fb6b039af6add6a9d641780bfc4a7e4833a4d1eb722fe95a81969c3bfe105d28d2dfd720bc1
- SSDEEP 24576:5pXA46QoRbeIzW4iEZ31m2Rx2+siA/s8:5peDiEB1vRYd/
- TLSH T1D115F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger