General
- Target 2026-09-05_76b9528a738429f421dfd7c8c4328829_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 719KB
- Sample260907-vh45vay1f1
- SHA256 153a05b5e22dd52cf7f13fe64350bf33545b2b0edac87c861f98f279edd99c74
- MD5 76b9528a738429f421dfd7c8c4328829
- SHA1 96bbcd4196f7dd99107995e5dfb5f398e53ebe13
- SHA512 b3f2ff10f94e44e2ae2dd5a6d8c6e23b60c738ab78d14f51deeaba50fdde7982883794a286786d6690a7bc2b488a889fff64e39d00bb293ae60f5436da0a8c3a
- SSDEEP 12288:9/o0vaQmuBeBNdUkwafNMP84st75L7B8X:1pS4BeBNNm85t5PBU
- TLSH T1D1F46D2697D402BCE0B7C17ACE869D42F7B6780A07B1AADF039045A25F675E44F3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-05_76b9528a738429f421dfd7c8c4328829_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-09-05_76b9528a738429f421dfd7c8c4328829_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-09-05_76b9528a738429f421dfd7c8c4328829_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 719KB
- SHA256 153a05b5e22dd52cf7f13fe64350bf33545b2b0edac87c861f98f279edd99c74
- MD5 76b9528a738429f421dfd7c8c4328829
- SHA1 96bbcd4196f7dd99107995e5dfb5f398e53ebe13
- SHA512 b3f2ff10f94e44e2ae2dd5a6d8c6e23b60c738ab78d14f51deeaba50fdde7982883794a286786d6690a7bc2b488a889fff64e39d00bb293ae60f5436da0a8c3a
- SSDEEP 12288:9/o0vaQmuBeBNdUkwafNMP84st75L7B8X:1pS4BeBNNm85t5PBU
- TLSH T1D1F46D2697D402BCE0B7C17ACE869D42F7B6780A07B1AADF039045A25F675E44F3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Event Triggered Execution: Image File Execution Options Injection
-
Disables service(s)
-
Executes dropped EXE
-
Stops running service(s)
-
Checks for any installed AV software in registry
MITRE ATT&CK Enterprise v16
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
2Service Execution
2Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Image File Execution Options Injection
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Image File Execution Options Injection
1Scheduled Task/Job
1Scheduled Task
1