General
- Target 2026-09-02_931cfe05756e0626676ee57c6ce5942f_cobalt-strike_icedid_luca-stealer_njrat
- Size 245KB
- Sample260902-yscp5a1gmc
- SHA256 d2567486b387538ec3b462eefddbb152361453aee674ded29985e866c5a6c78b
- MD5 931cfe05756e0626676ee57c6ce5942f
- SHA1 9bb7bb94f2106d7dea2754863275bdd86f785494
- SHA512 40d87d14cd34e3794115a183bd980e6ab48c385727242b7ea9ac6033d96d5dde933c7ac844c19d7aa2866e6a3149abd5df13e29e629d8ebd51ea1a30d312663f
- SSDEEP 3072:eli+LDf0bfkMBMwzUj/T3UkW3gnS77IIOgwwKVURs0S0TjDsDQzWZf0FhrfhxXN:80kDqUfkkGN7DOdwps0SIDs0zl1h
- TLSH T1F534C01777A930F9D5B78239C9650A46E732787617205BEF03A487722F23AD08D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-02_931cfe05756e0626676ee57c6ce5942f_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
adaptixc2
C2
-
secure.nxbase.im
Attributes
-
port
443
-
url_path
/updates/check.php
-
user_agent
Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0
Targets
-
- Target 2026-09-02_931cfe05756e0626676ee57c6ce5942f_cobalt-strike_icedid_luca-stealer_njrat
- Size 245KB
- SHA256 d2567486b387538ec3b462eefddbb152361453aee674ded29985e866c5a6c78b
- MD5 931cfe05756e0626676ee57c6ce5942f
- SHA1 9bb7bb94f2106d7dea2754863275bdd86f785494
- SHA512 40d87d14cd34e3794115a183bd980e6ab48c385727242b7ea9ac6033d96d5dde933c7ac844c19d7aa2866e6a3149abd5df13e29e629d8ebd51ea1a30d312663f
- SSDEEP 3072:eli+LDf0bfkMBMwzUj/T3UkW3gnS77IIOgwwKVURs0S0TjDsDQzWZf0FhrfhxXN:80kDqUfkkGN7DOdwps0SIDs0zl1h
- TLSH T1F534C01777A930F9D5B78239C9650A46E732787617205BEF03A487722F23AD08D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE