General
- Target 2026-09-07_5083d4377caf14c610e88d85c2dcd8aa_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 742KB
- Sample260909-b7xbraap2v
- SHA256 4025f185e93e9fc94fbfd880020b230b93bb5ea41ad4809984f8ddd8c622e39e
- MD5 5083d4377caf14c610e88d85c2dcd8aa
- SHA1 1031689779899abdc2621815a8f507fe51926ea7
- SHA512 79257fd86d5f28b153ee06c2bc78373c109451e0562635e99c1f8cd208a17dd714068f2379695d69992146bc6f5667a04283af0f6940b0241e06326140b14451
- SSDEEP 12288:wEZfy4RQZDG4Fx0m5X3BsjNdlz0b3w2Jj:nfyIQZDG4P0yX3Kjp0bw2
- TLSH T170F46D269BA402BCE0A6C179CE975952F775780B03B19EEF07D045A21F2B5E09F3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-07_5083d4377caf14c610e88d85c2dcd8aa_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_5083d4377caf14c610e88d85c2dcd8aa_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_5083d4377caf14c610e88d85c2dcd8aa_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 742KB
- SHA256 4025f185e93e9fc94fbfd880020b230b93bb5ea41ad4809984f8ddd8c622e39e
- MD5 5083d4377caf14c610e88d85c2dcd8aa
- SHA1 1031689779899abdc2621815a8f507fe51926ea7
- SHA512 79257fd86d5f28b153ee06c2bc78373c109451e0562635e99c1f8cd208a17dd714068f2379695d69992146bc6f5667a04283af0f6940b0241e06326140b14451
- SSDEEP 12288:wEZfy4RQZDG4Fx0m5X3BsjNdlz0b3w2Jj:nfyIQZDG4P0yX3Kjp0bw2
- TLSH T170F46D269BA402BCE0A6C179CE975952F775780B03B19EEF07D045A21F2B5E09F3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables referencing many IR and analysis tools
-
Suspicious use of SetThreadContext