General
- Target 2026-08-08_11a0d3f85d3e2d022385ebb310b0069a_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- Sample260808-epv8hszejh
- SHA256 93febc36fbbc938d54f611e8f2cffc16035b214ec30cabc63fa49149c7888f13
- MD5 11a0d3f85d3e2d022385ebb310b0069a
- SHA1 77f74025c89f5bbb8691f3b31650c55d9081493d
- SHA512 bb7e878e18b3934cfab52d31a55f479a5e961d6bc12b0612775f22062e12afa28573aa2767c01c705a89be5f1bc470ec498aaf330bcebfbb5094ec7981a5e58d
- SSDEEP 24576:5pXA4RQoRbeIzW4iEZ31m2Rx2+siA/s8:5pbDiEB1vRYd/
- TLSH T10415F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_11a0d3f85d3e2d022385ebb310b0069a_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_11a0d3f85d3e2d022385ebb310b0069a_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_11a0d3f85d3e2d022385ebb310b0069a_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- SHA256 93febc36fbbc938d54f611e8f2cffc16035b214ec30cabc63fa49149c7888f13
- MD5 11a0d3f85d3e2d022385ebb310b0069a
- SHA1 77f74025c89f5bbb8691f3b31650c55d9081493d
- SHA512 bb7e878e18b3934cfab52d31a55f479a5e961d6bc12b0612775f22062e12afa28573aa2767c01c705a89be5f1bc470ec498aaf330bcebfbb5094ec7981a5e58d
- SSDEEP 24576:5pXA4RQoRbeIzW4iEZ31m2Rx2+siA/s8:5pbDiEB1vRYd/
- TLSH T10415F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger