General
- Target 2026-08-16_1873cf4d6be519cc78d623785c560a73_cobalt-strike_icedid_njrat_stealc
- Size 282KB
- Sample260816-fpz25sdm4s
- SHA256 f1ee896577240ea32cbf4fabece21ba6107795a904a53550fd87c0af80b2758b
- MD5 1873cf4d6be519cc78d623785c560a73
- SHA1 ded057b15523628b4833ea52f6c46b92668add25
- SHA512 bf7755c079bb2c78e2a8706282b327e11444a2fad51b0c8d3179befcb456ed514b105bcc8ee1c233bb8b9cdbdcbe9c7f0cca6c4eda8813d440bff9381d6d3002
- SSDEEP 6144:qyw0Le5mUjMoaZ8BDOQ9FUdiyoCAlMn8x2a3O:Nw0a9FUULRMn8J
- TLSH T151548E1BF7A454F8D97B857CC9428446DB32B8068764EBCF13A00A962E336D15E7EB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_1873cf4d6be519cc78d623785c560a73_cobalt-strike_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_1873cf4d6be519cc78d623785c560a73_cobalt-strike_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_1873cf4d6be519cc78d623785c560a73_cobalt-strike_icedid_njrat_stealc
- Size 282KB
- SHA256 f1ee896577240ea32cbf4fabece21ba6107795a904a53550fd87c0af80b2758b
- MD5 1873cf4d6be519cc78d623785c560a73
- SHA1 ded057b15523628b4833ea52f6c46b92668add25
- SHA512 bf7755c079bb2c78e2a8706282b327e11444a2fad51b0c8d3179befcb456ed514b105bcc8ee1c233bb8b9cdbdcbe9c7f0cca6c4eda8813d440bff9381d6d3002
- SSDEEP 6144:qyw0Le5mUjMoaZ8BDOQ9FUdiyoCAlMn8x2a3O:Nw0a9FUULRMn8J
- TLSH T151548E1BF7A454F8D97B857CC9428446DB32B8068764EBCF13A00A962E336D15E7EB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.