General
- Target 2026-09-05_5676486a1e78aacf46bfdaf56da6707e_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 271KB
- Sample260907-1xzfssbf29
- SHA256 e9e7fc132f94cd1f021842957ed5de4ad4e6731985b41f62397a483aa53170fe
- MD5 5676486a1e78aacf46bfdaf56da6707e
- SHA1 653181650256ccd4d59c362c1aecfa59017e7221
- SHA512 36f1c112de33a11176bf560f0a7242d86113c1cc60d4e59926178b32b73f7c16eb863b88e7cb1dd264119364fe8147b729558ea467f2dcd82020608474fc63d1
- SSDEEP 3072:x4dY84ymSfkALGR6/zkhX4/KsGKBoSbYV59F42ST5vnjbF8bFSMD88hVaAIgFo2d:x4dk6FY4/KsGwsX9K9a1
- TLSH T1D5447C5977A40CFAEDA7C17DCD424905EA72BC4647A1E6DF07A00A974F236E08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_5676486a1e78aacf46bfdaf56da6707e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_5676486a1e78aacf46bfdaf56da6707e_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_5676486a1e78aacf46bfdaf56da6707e_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 271KB
- SHA256 e9e7fc132f94cd1f021842957ed5de4ad4e6731985b41f62397a483aa53170fe
- MD5 5676486a1e78aacf46bfdaf56da6707e
- SHA1 653181650256ccd4d59c362c1aecfa59017e7221
- SHA512 36f1c112de33a11176bf560f0a7242d86113c1cc60d4e59926178b32b73f7c16eb863b88e7cb1dd264119364fe8147b729558ea467f2dcd82020608474fc63d1
- SSDEEP 3072:x4dY84ymSfkALGR6/zkhX4/KsGKBoSbYV59F42ST5vnjbF8bFSMD88hVaAIgFo2d:x4dk6FY4/KsGwsX9K9a1
- TLSH T1D5447C5977A40CFAEDA7C17DCD424905EA72BC4647A1E6DF07A00A974F236E08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.