General
- Target 2026-08-25_cf89441b053b6cf27082276f8a562281_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 598KB
- Sample260826-kcb7rssshv
- SHA256 044be4a8318fbae0f612a04efd805c6bdee575c5517289733adaecfa030cbc2c
- MD5 cf89441b053b6cf27082276f8a562281
- SHA1 22826d7b792d24f4a5cd2942eb8831d3884ed0e9
- SHA512 4b4095584de00dbb5980a3d4db954a8bd9993d8391e748daece6f93568510207c06b50349f7b3a679b66bf01dc44f010bfa27725632e1ad0cff16a6f39bd640d
- SSDEEP 6144:kQqDalKHta6ALKZHcfxOYyZJBFrUjOpzPoVD1DGHm5bXHBHYcckO+kko/:kQq+lKHtLAqOb8zFojZDF5ZXGCo/
- TLSH T14FD4081AEAA541F1C0BBD439CA42652BFC727856833067E757819F532F667D0AB3EB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
6 signatures
Behavioral task
behavioral1
Sample
2026-08-25_cf89441b053b6cf27082276f8a562281_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_cf89441b053b6cf27082276f8a562281_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_cf89441b053b6cf27082276f8a562281_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 598KB
- SHA256 044be4a8318fbae0f612a04efd805c6bdee575c5517289733adaecfa030cbc2c
- MD5 cf89441b053b6cf27082276f8a562281
- SHA1 22826d7b792d24f4a5cd2942eb8831d3884ed0e9
- SHA512 4b4095584de00dbb5980a3d4db954a8bd9993d8391e748daece6f93568510207c06b50349f7b3a679b66bf01dc44f010bfa27725632e1ad0cff16a6f39bd640d
- SSDEEP 6144:kQqDalKHta6ALKZHcfxOYyZJBFrUjOpzPoVD1DGHm5bXHBHYcckO+kko/:kQq+lKHtLAqOb8zFojZDF5ZXGCo/
- TLSH T14FD4081AEAA541F1C0BBD439CA42652BFC727856833067E757819F532F667D0AB3EB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare Tools registry key
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.