General
- Target 2026-09-04_0b37345b7f60dcf0b3e2092f4cdf6a73_cobalt-strike_icedid_luca-stealer_njrat
- Size 177KB
- Sample260905-xh4v7afe23
- SHA256 cb7a8359890f27dd0203d4c4bdf13931a81374821900d7dbacd03a55b756aabd
- MD5 0b37345b7f60dcf0b3e2092f4cdf6a73
- SHA1 72e20596bcbb01219445d1ce6fc68ea40bb58701
- SHA512 020b6ff3f6e5c832561c6e75415ae3ddcdadda1e808cbd11957dcf8da264ee9a2cec3b648c559daefe40e646106147f7a09c0e5949e1b209e42a79c6609e1ee3
- SSDEEP 3072:B4uyOFVFSe+zdqrG4YEoFDnmyhXwLa6x7wSLvc8H35T:B4uhcecOGSoFX8a6xUYl
- TLSH T1B8048D45B3A100F5E1B78239CD665646E772B8150760ABDF03A407B6AF237D09E3FB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_0b37345b7f60dcf0b3e2092f4cdf6a73_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_0b37345b7f60dcf0b3e2092f4cdf6a73_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_0b37345b7f60dcf0b3e2092f4cdf6a73_cobalt-strike_icedid_luca-stealer_njrat
- Size 177KB
- SHA256 cb7a8359890f27dd0203d4c4bdf13931a81374821900d7dbacd03a55b756aabd
- MD5 0b37345b7f60dcf0b3e2092f4cdf6a73
- SHA1 72e20596bcbb01219445d1ce6fc68ea40bb58701
- SHA512 020b6ff3f6e5c832561c6e75415ae3ddcdadda1e808cbd11957dcf8da264ee9a2cec3b648c559daefe40e646106147f7a09c0e5949e1b209e42a79c6609e1ee3
- SSDEEP 3072:B4uyOFVFSe+zdqrG4YEoFDnmyhXwLa6x7wSLvc8H35T:B4uhcecOGSoFX8a6xUYl
- TLSH T1B8048D45B3A100F5E1B78239CD665646E772B8150760ABDF03A407B6AF237D09E3FB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.