General
- Target 2026-08-24_aed5207f08b2c8013dac5eff3fd26d6b_cobalt-strike_icedid_luca-stealer_njrat_vidar
- Size 273KB
- Sample260825-er63sswgle
- SHA256 9243ae6a4930e36403868f7f4ea52423cbc5f458db36cbc598b07962fc9115e5
- MD5 aed5207f08b2c8013dac5eff3fd26d6b
- SHA1 03240226a753a51287010ce7a959bf3df18a3e33
- SHA512 eaaef501e45a3238c34a3528b51a155d05ba121f2c21b3091f3022d34f613861fc0d4a9aa408f3c03ed6ce8037b92ffe9918efd4bc5740e7e4b511e0161bf621
- SSDEEP 3072:vQBslxs9Yy+2CZreNOiF+Coq4bmphRgD8m1EOSDLXb8gSuVBFN9r9E6ZcCqx9W:vCZkxFLD1EO4LXtzN9T/qx9
- TLSH T158545B5672A50CF8E4B7D27989524A42EB72FC5607B19BDF03A042D72F237D09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-24_aed5207f08b2c8013dac5eff3fd26d6b_cobalt-strike_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_aed5207f08b2c8013dac5eff3fd26d6b_cobalt-strike_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_aed5207f08b2c8013dac5eff3fd26d6b_cobalt-strike_icedid_luca-stealer_njrat_vidar
- Size 273KB
- SHA256 9243ae6a4930e36403868f7f4ea52423cbc5f458db36cbc598b07962fc9115e5
- MD5 aed5207f08b2c8013dac5eff3fd26d6b
- SHA1 03240226a753a51287010ce7a959bf3df18a3e33
- SHA512 eaaef501e45a3238c34a3528b51a155d05ba121f2c21b3091f3022d34f613861fc0d4a9aa408f3c03ed6ce8037b92ffe9918efd4bc5740e7e4b511e0161bf621
- SSDEEP 3072:vQBslxs9Yy+2CZreNOiF+Coq4bmphRgD8m1EOSDLXb8gSuVBFN9r9E6ZcCqx9W:vCZkxFLD1EO4LXtzN9T/qx9
- TLSH T158545B5672A50CF8E4B7D27989524A42EB72FC5607B19BDF03A042D72F237D09D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.