General
- Target 2026-08-20_2895dfeffc242df1399cfe07230ddf70_cobalt-strike_icedid_luca-stealer_njrat
- Size 301KB
- Sample260820-xxtc1afd55
- SHA256 c915c76b341a037d95b054c6fe2ca4c007598ee28781b85d100db1ce102ac31c
- MD5 2895dfeffc242df1399cfe07230ddf70
- SHA1 f6fd7215a4f63dc251eb02c7ca2115fce63a5978
- SHA512 4646d28ac6811674c768df76e9ece3bba5bc5cbd1888f32b15f64be492f428d47d350ac24bee0a035edd8902ffbfbe54d71900ac6c0391a82c656db41d9a0321
- SSDEEP 6144:0drVKLvusElMyBk22H3uunD6/ovT+4gEc5e:0B0qsElMc2X7u/ovTP65e
- TLSH T13064CF56B6A621FDD2678A7DC0410596E7B23C220B9097EF07B047B69F232D05D3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2895dfeffc242df1399cfe07230ddf70_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2895dfeffc242df1399cfe07230ddf70_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2895dfeffc242df1399cfe07230ddf70_cobalt-strike_icedid_luca-stealer_njrat
- Size 301KB
- SHA256 c915c76b341a037d95b054c6fe2ca4c007598ee28781b85d100db1ce102ac31c
- MD5 2895dfeffc242df1399cfe07230ddf70
- SHA1 f6fd7215a4f63dc251eb02c7ca2115fce63a5978
- SHA512 4646d28ac6811674c768df76e9ece3bba5bc5cbd1888f32b15f64be492f428d47d350ac24bee0a035edd8902ffbfbe54d71900ac6c0391a82c656db41d9a0321
- SSDEEP 6144:0drVKLvusElMyBk22H3uunD6/ovT+4gEc5e:0B0qsElMc2X7u/ovTP65e
- TLSH T13064CF56B6A621FDD2678A7DC0410596E7B23C220B9097EF07B047B69F232D05D3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE