General
- Target 2026-09-07_df3bbb31887c4de15f750eeab7439de7_cobalt-strike_icedid_luca-stealer_njrat
- Size 742KB
- Sample260908-eb4mqsch23
- SHA256 e7d495aa1841a777a2f310817e01df94facb94db2df0654acb615d4c9ea6224d
- MD5 df3bbb31887c4de15f750eeab7439de7
- SHA1 523963ab1423f0f9bcc298f4cd2a1aeec22524c8
- SHA512 c2a00578e804ca59307dc77f042f856dc08c6495c639b012d58df5a8e9194bfbf6361c05a67f93bdd39814f8f056e9cd9e3a89d2a07b2773e5a678d72c440639
- SSDEEP 12288:loNBnHmI0nxC21vwanrRpNXKNwkqrkiieg6xVEsIzp4Q7+ihRLyHQweG1Faxf:eNX0nxD1vwakNwkqIivzksIBNyHq82
- TLSH T19DF402A7779524F9E0FA8278D9621901E3327C76072056BF07A852751E232D26E3FF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_df3bbb31887c4de15f750eeab7439de7_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_df3bbb31887c4de15f750eeab7439de7_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_df3bbb31887c4de15f750eeab7439de7_cobalt-strike_icedid_luca-stealer_njrat
- Size 742KB
- SHA256 e7d495aa1841a777a2f310817e01df94facb94db2df0654acb615d4c9ea6224d
- MD5 df3bbb31887c4de15f750eeab7439de7
- SHA1 523963ab1423f0f9bcc298f4cd2a1aeec22524c8
- SHA512 c2a00578e804ca59307dc77f042f856dc08c6495c639b012d58df5a8e9194bfbf6361c05a67f93bdd39814f8f056e9cd9e3a89d2a07b2773e5a678d72c440639
- SSDEEP 12288:loNBnHmI0nxC21vwanrRpNXKNwkqrkiieg6xVEsIzp4Q7+ihRLyHQweG1Faxf:eNX0nxD1vwakNwkqIivzksIBNyHq82
- TLSH T19DF402A7779524F9E0FA8278D9621901E3327C76072056BF07A852751E232D26E3FF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1