General
- Target 2026-08-09_7d41ef84ddefd578ed3cf3760cd66d47_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- Sample260809-23nf6aer3y
- SHA256 987575f4cadc51e2592b10f36e83093bcc794c626344cb6cec13566d7b8b2286
- MD5 7d41ef84ddefd578ed3cf3760cd66d47
- SHA1 85b95c96727e57027e1eac1f2255ac7c3978d6ef
- SHA512 a097d284bc75c00d101d7bd017dff201da2d8d2a11eca0389e37d4914cac55c44b2fd81467e7711afeb244825e2f331c4d17ab65fb4b87fac434a04486ea6228
- SSDEEP 24576:5pXA4BQoRbeIzW4iEZ31m2Rx2+siA/s8:5pbDiEB1vRYd/
- TLSH T1AC15F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_7d41ef84ddefd578ed3cf3760cd66d47_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7d41ef84ddefd578ed3cf3760cd66d47_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7d41ef84ddefd578ed3cf3760cd66d47_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- SHA256 987575f4cadc51e2592b10f36e83093bcc794c626344cb6cec13566d7b8b2286
- MD5 7d41ef84ddefd578ed3cf3760cd66d47
- SHA1 85b95c96727e57027e1eac1f2255ac7c3978d6ef
- SHA512 a097d284bc75c00d101d7bd017dff201da2d8d2a11eca0389e37d4914cac55c44b2fd81467e7711afeb244825e2f331c4d17ab65fb4b87fac434a04486ea6228
- SSDEEP 24576:5pXA4BQoRbeIzW4iEZ31m2Rx2+siA/s8:5pbDiEB1vRYd/
- TLSH T1AC15F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Suspicious use of NtSetInformationThreadHideFromDebugger