Overview

overview

10

Static

static

10

2026-08-14...lc.exe

windows10-2004-x64

1

2026-08-14...lc.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-14_45af3035b6e71923cee758b1a1e2d350_cobalt-strike_icedid_luca-stealer_njrat_stealc
  • Size 257KB
  • Sample260814-e8rpfavwbs
  • SHA256 92407905211e9b73028ccd263d4eddfde8072a43347f12df5f6214373b81ee71
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-08-14_45af3035b6e71923cee758b1a1e2d350_cobalt-strike_icedid_luca-stealer_njrat_stealc
    .exe 257KB

2026-08-14_45af3035b6e71923cee758b1a1e2d350_cobalt-strike_icedid_luca-stealer_njrat_stealc

  • IMPHASH 73bca1cdf29a97343f37ae7a842543b5
  • SHA256 92407905211e9b73028ccd263d4eddfde8072a43347f12df5f6214373b81ee71
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Detects executables Discord URL observed in first stage droppers

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
53:c7:72:f0:61:bd:a1:1c:86:19:91:94:7b:37:44:37:77:80:88:d2:b1:5d:78:aa:2b:1d:83:89:12:76:47:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN
Minor OS version
0
Major OS version
6
Entry point
14852
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths