General
- Target 2026-09-08_4a80cefce5f98d45e95226af00fce482_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 381KB
- Sample260908-vxrs3agh86
- SHA256 9a006b45539d39e5d786acecb42050a4214d3c51c25b6137178a58a9a77d4b8a
- MD5 4a80cefce5f98d45e95226af00fce482
- SHA1 41c52bd9808c6dbd0cb9b197f17bbefa4fa23c08
- SHA512 adaca8ee10743625ae96967d9daae226be99b737fa40fb78fedf55ab30624db07bcea031ece780f0c47682a99a1da8f293039bda0560b295c67427603b0e8400
- SSDEEP 6144:I3pInivnCNLSgDsJzhBbG7ywWRgnH9XA+mw64yh5NgEuRMYnkHN:nzOh05Qw640u+FN
- TLSH T12A849D15FBA500F9D0A7D138CD524502EB727C8E47B1AADF23E44AA61F276E04E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_4a80cefce5f98d45e95226af00fce482_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_4a80cefce5f98d45e95226af00fce482_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_4a80cefce5f98d45e95226af00fce482_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 381KB
- SHA256 9a006b45539d39e5d786acecb42050a4214d3c51c25b6137178a58a9a77d4b8a
- MD5 4a80cefce5f98d45e95226af00fce482
- SHA1 41c52bd9808c6dbd0cb9b197f17bbefa4fa23c08
- SHA512 adaca8ee10743625ae96967d9daae226be99b737fa40fb78fedf55ab30624db07bcea031ece780f0c47682a99a1da8f293039bda0560b295c67427603b0e8400
- SSDEEP 6144:I3pInivnCNLSgDsJzhBbG7ywWRgnH9XA+mw64yh5NgEuRMYnkHN:nzOh05Qw640u+FN
- TLSH T12A849D15FBA500F9D0A7D138CD524502EB727C8E47B1AADF23E44AA61F276E04E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Adds Run key to start application