General
- Target 2026-08-07_386b8899c934d8b9cc64f5171596e73d_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 762KB
- Sample260808-byq4daxemf
- SHA256 4f9be467e4933b06369fd6b52faad7c97d0e29bfab9ca7cd7ba387b7798c5161
- MD5 386b8899c934d8b9cc64f5171596e73d
- SHA1 4186f792fff5817d41c58e0987f47daa4b0d7e96
- SHA512 5bab18d13b4c777c66f5e32786b93264948b15dc38422e19bf62ad22d884ff8989d86db13a017b6ec70e71386613b54aaf1cc540964110221797549226243a44
- SSDEEP 12288:jmtIn6EAPRgZdI1vE1f/mJDO9f578beb3GTVHVgfk1P3R9fW9ah:jmtIn+2ZdI1vE1f/Xk1PhNH
- TLSH T103F45D17938041FDE0BAD27A8E968961F732F80A07A16ADF17D045621F9B1D89F3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_386b8899c934d8b9cc64f5171596e73d_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_386b8899c934d8b9cc64f5171596e73d_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_386b8899c934d8b9cc64f5171596e73d_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 762KB
- SHA256 4f9be467e4933b06369fd6b52faad7c97d0e29bfab9ca7cd7ba387b7798c5161
- MD5 386b8899c934d8b9cc64f5171596e73d
- SHA1 4186f792fff5817d41c58e0987f47daa4b0d7e96
- SHA512 5bab18d13b4c777c66f5e32786b93264948b15dc38422e19bf62ad22d884ff8989d86db13a017b6ec70e71386613b54aaf1cc540964110221797549226243a44
- SSDEEP 12288:jmtIn6EAPRgZdI1vE1f/mJDO9f578beb3GTVHVgfk1P3R9fW9ah:jmtIn+2ZdI1vE1f/Xk1PhNH
- TLSH T103F45D17938041FDE0BAD27A8E968961F732F80A07A16ADF17D045621F9B1D89F3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Deletes itself
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.