General
- Target 2026-08-20_3d5c63405a4d564befec3a25e9ecca64_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 398KB
- Sample260820-p5xfmacp3z
- SHA256 6668ce35ef03ac9a137caf7e5604c491f79781cdaf5d3c727824c90fac8fa6ed
- MD5 3d5c63405a4d564befec3a25e9ecca64
- SHA1 8f7217985cf8aef0ce5dcde9662791c3b57d5449
- SHA512 cccb716f8fcef94c4d368629755cae564139ac394848b565308c6ef26c4fd4f2d666887de62229eee5acb64ad80e82d332e3fb9e515a63010d399576e7b9154d
- SSDEEP 6144:gLdDe0jGag7x35n0XZLlNgFqzipbe+gqBPjlaHr/LA:shtgZ50yy2be+bLlaHnA
- TLSH T17A947D25FB6400F9D1A7D178C9524902EB727C9E4760EBDF23E84A961F236E05E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_3d5c63405a4d564befec3a25e9ecca64_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_3d5c63405a4d564befec3a25e9ecca64_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_3d5c63405a4d564befec3a25e9ecca64_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 398KB
- SHA256 6668ce35ef03ac9a137caf7e5604c491f79781cdaf5d3c727824c90fac8fa6ed
- MD5 3d5c63405a4d564befec3a25e9ecca64
- SHA1 8f7217985cf8aef0ce5dcde9662791c3b57d5449
- SHA512 cccb716f8fcef94c4d368629755cae564139ac394848b565308c6ef26c4fd4f2d666887de62229eee5acb64ad80e82d332e3fb9e515a63010d399576e7b9154d
- SSDEEP 6144:gLdDe0jGag7x35n0XZLlNgFqzipbe+gqBPjlaHr/LA:shtgZ50yy2be+bLlaHnA
- TLSH T17A947D25FB6400F9D1A7D178C9524902EB727C9E4760EBDF23E84A961F236E05E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.