General
- Target 2026-08-14_bfd0d109a9f7419dd0f17c7cd5df15dc_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 365KB
- Sample260814-pvgmestcqa
- SHA256 350b81328772191b96bd7f9fd988cf1ac63579673392e8fc9da7e22c564f5105
- MD5 bfd0d109a9f7419dd0f17c7cd5df15dc
- SHA1 835f143c498ad47df7ec38a5159608805e7c345e
- SHA512 3b713d1bd13d2839e01dac8847b90333d8e65afc1befa3a8ab827352273a233163dee5488b903788a19fdc021400043da81cf84aa5424e0c54910700d22939ba
- SSDEEP 6144:2m5NBLJLbUm73DRrqluGVNzt5GcTL/JqXHua7JWl9XxMPe:F5b73Nmtnt7TdaYO
- TLSH T1E0849E69E75810F9E177C47CC9624A02EBB27C9D0760A7DF23A44A561F23BE09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_bfd0d109a9f7419dd0f17c7cd5df15dc_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_bfd0d109a9f7419dd0f17c7cd5df15dc_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_bfd0d109a9f7419dd0f17c7cd5df15dc_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 365KB
- SHA256 350b81328772191b96bd7f9fd988cf1ac63579673392e8fc9da7e22c564f5105
- MD5 bfd0d109a9f7419dd0f17c7cd5df15dc
- SHA1 835f143c498ad47df7ec38a5159608805e7c345e
- SHA512 3b713d1bd13d2839e01dac8847b90333d8e65afc1befa3a8ab827352273a233163dee5488b903788a19fdc021400043da81cf84aa5424e0c54910700d22939ba
- SSDEEP 6144:2m5NBLJLbUm73DRrqluGVNzt5GcTL/JqXHua7JWl9XxMPe:F5b73Nmtnt7TdaYO
- TLSH T1E0849E69E75810F9E177C47CC9624A02EBB27C9D0760A7DF23A44A561F23BE09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1