General
- Target 2026-08-20_69a29127aac109308093a1a78d97c0f6_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 396KB
- Sample260820-pr9h2acl7z
- SHA256 807e09bc4affcf4d6f0233174d483c8c13a16c3d90a8caab5d428ad7931a3518
- MD5 69a29127aac109308093a1a78d97c0f6
- SHA1 3a44051bfcdd34cfa45c5f7da821b1170e01a824
- SHA512 f472696a2e7ad88d4b730ceff3b9c9c9199e3d82cb4ad3d9daa1554050469db040c87190e53ac66d80b23207091eda436d673e9cbfadb5c191db69ec88f32291
- SSDEEP 6144:sLn9GhtKPzOeE+ijYfM1o2Kb6aNvmc/DyqYsVzgt:4n9kEOJ+5b6aNzryqY+U
- TLSH T1E0848E25FB6800F9D1A7D138C9524506EB737C5E4760EBDF13A84AA61F236E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_69a29127aac109308093a1a78d97c0f6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_69a29127aac109308093a1a78d97c0f6_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_69a29127aac109308093a1a78d97c0f6_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 396KB
- SHA256 807e09bc4affcf4d6f0233174d483c8c13a16c3d90a8caab5d428ad7931a3518
- MD5 69a29127aac109308093a1a78d97c0f6
- SHA1 3a44051bfcdd34cfa45c5f7da821b1170e01a824
- SHA512 f472696a2e7ad88d4b730ceff3b9c9c9199e3d82cb4ad3d9daa1554050469db040c87190e53ac66d80b23207091eda436d673e9cbfadb5c191db69ec88f32291
- SSDEEP 6144:sLn9GhtKPzOeE+ijYfM1o2Kb6aNvmc/DyqYsVzgt:4n9kEOJ+5b6aNzryqY+U
- TLSH T1E0848E25FB6800F9D1A7D138C9524506EB737C5E4760EBDF13A84AA61F236E09E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.