General
- Target 2026-08-15_fda47cb3d173109e8ef4edff2422ee66_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 444KB
- Sample260815-vwpmba1tay
- SHA256 1912e82228043ba35560375dbc322bd49048f8e805035f82393060304276fabf
- MD5 fda47cb3d173109e8ef4edff2422ee66
- SHA1 f7f26935137e91433f71d463aad9be4d663f19a0
- SHA512 f646fca3e0fb5f4c0b1c6f283e99230d154238088b4f48c5dd8777b37563f04191b68e8dbef1aee17b00a3d9bbe2cb62d38a1339b410d71a80deeef4e2bc150e
- SSDEEP 6144:3woKDY7ugPSao+dIJ+1fZ83+r296TljRJoPLg9xMvic86El:37ugPRZnG3+rt5O0vzmEl
- TLSH T1CFA4AE49FFA600F9E0AF8139C9555997E672780607A0DADF03A042779F336E05D3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_fda47cb3d173109e8ef4edff2422ee66_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_fda47cb3d173109e8ef4edff2422ee66_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_fda47cb3d173109e8ef4edff2422ee66_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 444KB
- SHA256 1912e82228043ba35560375dbc322bd49048f8e805035f82393060304276fabf
- MD5 fda47cb3d173109e8ef4edff2422ee66
- SHA1 f7f26935137e91433f71d463aad9be4d663f19a0
- SHA512 f646fca3e0fb5f4c0b1c6f283e99230d154238088b4f48c5dd8777b37563f04191b68e8dbef1aee17b00a3d9bbe2cb62d38a1339b410d71a80deeef4e2bc150e
- SSDEEP 6144:3woKDY7ugPSao+dIJ+1fZ83+r296TljRJoPLg9xMvic86El:37ugPRZnG3+rt5O0vzmEl
- TLSH T1CFA4AE49FFA600F9E0AF8139C9555997E672780607A0DADF03A042779F336E05D3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext