General
- Target 2026-08-20_fcf9c7b6b28ae7c50f77d4e44b4fdbf5_cobalt-strike_icedid_luca-stealer_njrat
- Size 299KB
- Sample260820-xbggbafc38
- SHA256 0b1af3f66c3fb37441d39d3f53e97c68b6e09d8dcd3dae257017e295c78899d6
- MD5 fcf9c7b6b28ae7c50f77d4e44b4fdbf5
- SHA1 25a4f3d9a18a279e7b84f3d7d6233ed4a60b7920
- SHA512 d30ea4f56c5c649b5a3ef95459e6d481109f740919b4b76c963d61cbd5e12c3e921c420381fb7f42d74c0934e6f06ffef6f07bf93f0f00f49c487a4e7686f9ec
- SSDEEP 6144:idrVKLvusElMyBkiyyyuDBN7HG895x0H3YTiF:iB0qsElMs9yuDBN7mtSiF
- TLSH T10864D08673542DF9E5379634C8960206E7B6B871072057DF93A00A376F2B1E09E3FB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_fcf9c7b6b28ae7c50f77d4e44b4fdbf5_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_fcf9c7b6b28ae7c50f77d4e44b4fdbf5_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_fcf9c7b6b28ae7c50f77d4e44b4fdbf5_cobalt-strike_icedid_luca-stealer_njrat
- Size 299KB
- SHA256 0b1af3f66c3fb37441d39d3f53e97c68b6e09d8dcd3dae257017e295c78899d6
- MD5 fcf9c7b6b28ae7c50f77d4e44b4fdbf5
- SHA1 25a4f3d9a18a279e7b84f3d7d6233ed4a60b7920
- SHA512 d30ea4f56c5c649b5a3ef95459e6d481109f740919b4b76c963d61cbd5e12c3e921c420381fb7f42d74c0934e6f06ffef6f07bf93f0f00f49c487a4e7686f9ec
- SSDEEP 6144:idrVKLvusElMyBkiyyyuDBN7HG895x0H3YTiF:iB0qsElMs9yuDBN7mtSiF
- TLSH T10864D08673542DF9E5379634C8960206E7B6B871072057DF93A00A376F2B1E09E3FB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE