General
- Target 2026-08-15_b6522cebb2504a55dc8e4303d37a8c04_cobalt-strike_icedid_luca-stealer_njrat
- Size 289KB
- Sample260815-mslr9avwhw
- SHA256 52abb73a7a3b728ef3998b9f6c1e364f941390b5eccde2d6176f50c497389403
- MD5 b6522cebb2504a55dc8e4303d37a8c04
- SHA1 195df954821efb61aa224d2f2822f18bb366ffbf
- SHA512 cb6206218b500cfb71c1dbb3592b009c954b0c5fcd42fba98382caaeed0597b2f8a392ba2df8d52e19527a2426223b56a6b3da4d57fe973dfa5ee14096d371f3
- SSDEEP 3072:yFIyuaR5V3hVd6719Qtb2676RP7pYrmddhdLINN0XyaHhZYqlUY6+WSvm:y6zY5lfd6nQtC674dhdL8SCIW
- TLSH T1C254E442A79120E5D766E5FCF4B041B6BF6BBE21CE337E5E02925E453E222835D39630
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_b6522cebb2504a55dc8e4303d37a8c04_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_b6522cebb2504a55dc8e4303d37a8c04_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_b6522cebb2504a55dc8e4303d37a8c04_cobalt-strike_icedid_luca-stealer_njrat
- Size 289KB
- SHA256 52abb73a7a3b728ef3998b9f6c1e364f941390b5eccde2d6176f50c497389403
- MD5 b6522cebb2504a55dc8e4303d37a8c04
- SHA1 195df954821efb61aa224d2f2822f18bb366ffbf
- SHA512 cb6206218b500cfb71c1dbb3592b009c954b0c5fcd42fba98382caaeed0597b2f8a392ba2df8d52e19527a2426223b56a6b3da4d57fe973dfa5ee14096d371f3
- SSDEEP 3072:yFIyuaR5V3hVd6719Qtb2676RP7pYrmddhdLINN0XyaHhZYqlUY6+WSvm:y6zY5lfd6nQtC674dhdL8SCIW
- TLSH T1C254E442A79120E5D766E5FCF4B041B6BF6BBE21CE337E5E02925E453E222835D39630
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext