General
- Target 2026-08-12_d8a3c722abb544bf5f788422c12b45ca_cobalt-strike_icedid_njrat_stealc
- Size 279KB
- Sample260813-aa2drsvygw
- SHA256 d5b5c02afc4a9474b041ea07af9e98d3c863c5e5f5aabab0aacba724862d0864
- MD5 d8a3c722abb544bf5f788422c12b45ca
- SHA1 f0920e356bb11715b9e20b992f7712507f0f278e
- SHA512 1f74003a3c41cead069e44a46c6c7d729c14b1ce1a655b072764955993671968e47b8710ab035f9254870cdf9fe4125423cbb47339248d0ad629d04ba6100955
- SSDEEP 3072:ipWbpSu3I2rwUtkg8WFO6TWhNOdlFApWFMGLhHKAu+7MclHdCpQ0muhM7H5cEY8m:zpSqI2raDOdlFWWaihqr+T0pwv+
- TLSH T1E4546D1AF7A458F8E97BC53CC9428546DB72BC468760EACF13A00AE61F236D15E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_d8a3c722abb544bf5f788422c12b45ca_cobalt-strike_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_d8a3c722abb544bf5f788422c12b45ca_cobalt-strike_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_d8a3c722abb544bf5f788422c12b45ca_cobalt-strike_icedid_njrat_stealc
- Size 279KB
- SHA256 d5b5c02afc4a9474b041ea07af9e98d3c863c5e5f5aabab0aacba724862d0864
- MD5 d8a3c722abb544bf5f788422c12b45ca
- SHA1 f0920e356bb11715b9e20b992f7712507f0f278e
- SHA512 1f74003a3c41cead069e44a46c6c7d729c14b1ce1a655b072764955993671968e47b8710ab035f9254870cdf9fe4125423cbb47339248d0ad629d04ba6100955
- SSDEEP 3072:ipWbpSu3I2rwUtkg8WFO6TWhNOdlFApWFMGLhHKAu+7MclHdCpQ0muhM7H5cEY8m:zpSqI2raDOdlFWWaihqr+T0pwv+
- TLSH T1E4546D1AF7A458F8E97BC53CC9428546DB72BC468760EACF13A00AE61F236D15E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.