General
- Target 2026-08-17_8e89ab338ccf4431ac4b52a60d13c7c5_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 328KB
- Sample260818-af4fbabm3v
- SHA256 300617bf04216d0d5869e66b1bd4cf2a761840b4a29519bd8e4d08fd9599c9ea
- MD5 8e89ab338ccf4431ac4b52a60d13c7c5
- SHA1 57021b885dbba4f9b3409eac78afdee7c22a4a1d
- SHA512 184d83e69db08472f9cf4511e26932c5163e4fd5f3eb0b71669a4186506cecf78a1435fdfb3bfe32dd37d2fea832171a5226bd80b960d21434b325fe7084e061
- SSDEEP 6144:Yr0lYK9zKW2XOeWXfbHf9nWidMSQDq6gNQAs6ePvTU:meXXjVWHPG6g6Mmb
- TLSH T198648C19F7A510F9E567C23CC9424906EB72BC164761EBCF13A04A963F27AE09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_8e89ab338ccf4431ac4b52a60d13c7c5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_8e89ab338ccf4431ac4b52a60d13c7c5_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_8e89ab338ccf4431ac4b52a60d13c7c5_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 328KB
- SHA256 300617bf04216d0d5869e66b1bd4cf2a761840b4a29519bd8e4d08fd9599c9ea
- MD5 8e89ab338ccf4431ac4b52a60d13c7c5
- SHA1 57021b885dbba4f9b3409eac78afdee7c22a4a1d
- SHA512 184d83e69db08472f9cf4511e26932c5163e4fd5f3eb0b71669a4186506cecf78a1435fdfb3bfe32dd37d2fea832171a5226bd80b960d21434b325fe7084e061
- SSDEEP 6144:Yr0lYK9zKW2XOeWXfbHf9nWidMSQDq6gNQAs6ePvTU:meXXjVWHPG6g6Mmb
- TLSH T198648C19F7A510F9E567C23CC9424906EB72BC164761EBCF13A04A963F27AE09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1