General
- Target 2026-09-01_6555447aa261a45cfe2540880ce2d70e_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 885KB
- Sample260903-mv2aqavfnc
- SHA256 533e8d93be90798c7850db35f57bcf626cb2fa90faf5eb73d89a3706508fb82e
- MD5 6555447aa261a45cfe2540880ce2d70e
- SHA1 0dbf40f721b06e463d9d02b6af90c75d52ab19d1
- SHA512 7c97ea5fbfc55dba14bbc29424702f7dc54ed30340d539b3e65f7522081e690eb3fe4673fdc1c165bec55800c790aadef37d459c1c84c3d911ca156081927b02
- SSDEEP 12288:nAl3xO9VX6gj2LoWPHoBV0a0MS6lHYZHlxjEdgwa1h7xmfeYiHnvbCFVo:ZPqL2BJHEZEdeifpiHnDAo
- TLSH T18315B059F6A842F9C077C138CE92A51BEA72384907304ADB13E54A653F636F09B7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_6555447aa261a45cfe2540880ce2d70e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_6555447aa261a45cfe2540880ce2d70e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_6555447aa261a45cfe2540880ce2d70e_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 885KB
- SHA256 533e8d93be90798c7850db35f57bcf626cb2fa90faf5eb73d89a3706508fb82e
- MD5 6555447aa261a45cfe2540880ce2d70e
- SHA1 0dbf40f721b06e463d9d02b6af90c75d52ab19d1
- SHA512 7c97ea5fbfc55dba14bbc29424702f7dc54ed30340d539b3e65f7522081e690eb3fe4673fdc1c165bec55800c790aadef37d459c1c84c3d911ca156081927b02
- SSDEEP 12288:nAl3xO9VX6gj2LoWPHoBV0a0MS6lHYZHlxjEdgwa1h7xmfeYiHnvbCFVo:ZPqL2BJHEZEdeifpiHnDAo
- TLSH T18315B059F6A842F9C077C138CE92A51BEA72384907304ADB13E54A653F636F09B7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE