General
- Target 2026-08-20_bb44ca7355d25864868f55a2db1d4fc7_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 159KB
- Sample260821-c1yfxa1dnb
- SHA256 d5dde898a6173331f43915c458f268a19a4c0b85d9c2fa47d69a3406dba01f1e
- MD5 bb44ca7355d25864868f55a2db1d4fc7
- SHA1 b0123db40666435d8bcf45ff01b607099d71bc96
- SHA512 bc2d277432ecb544364c21eeb2cc9be75aef06a2ba18542f0396f645c255d83bf63e94014a98661cf59cfe2e625319264d4c3f7f7c1f4f80d835ef009a73279f
- SSDEEP 3072:eBFLi6PgROW6FUb3AHnsRxe81ijdyDnOwHXRvtgIcgOM:eFLi5ROXFUbnj91ijoX9p4
- TLSH T175F37C5773A520F9E1B78238C9920A46E772783517619BEF03A047766F236E09D3FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_bb44ca7355d25864868f55a2db1d4fc7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_bb44ca7355d25864868f55a2db1d4fc7_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_bb44ca7355d25864868f55a2db1d4fc7_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 159KB
- SHA256 d5dde898a6173331f43915c458f268a19a4c0b85d9c2fa47d69a3406dba01f1e
- MD5 bb44ca7355d25864868f55a2db1d4fc7
- SHA1 b0123db40666435d8bcf45ff01b607099d71bc96
- SHA512 bc2d277432ecb544364c21eeb2cc9be75aef06a2ba18542f0396f645c255d83bf63e94014a98661cf59cfe2e625319264d4c3f7f7c1f4f80d835ef009a73279f
- SSDEEP 3072:eBFLi6PgROW6FUb3AHnsRxe81ijdyDnOwHXRvtgIcgOM:eFLi5ROXFUbnj91ijoX9p4
- TLSH T175F37C5773A520F9E1B78238C9920A46E772783517619BEF03A047766F236E09D3FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.