General
- Target 2026-09-08_4673725f1adab911f8089538b2a4e694_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.4MB
- Sample260910-h2w75aga48
- SHA256 d03155b9b6f56dc0dde5df5854a635b8d1f064d8ccd82905a89a128c74cad9d3
- MD5 4673725f1adab911f8089538b2a4e694
- SHA1 6049cc237b5ba5bbcdfd2cc5adf5604a1dbea280
- SHA512 e92a94845b015b0847db9a637a80bee20f27729d748e2a20df0f0b45b10f71881f7777670710d3f3835e932f9bb4f4dab1416456161a8f001b7ff8eb9cad9979
- SSDEEP 24576:c09W8T+KfIGI9pZcTy045HbJiGGC5SYCTyxknw4FYnshx8OfVe247:c09W8jG9pyW04ZXzx4x8EVep
- TLSH T15765AD2DE6A801AAE06A9136EC554306E7B37F15137186CB33A0766A1F775E0CF3EE11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_4673725f1adab911f8089538b2a4e694_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_4673725f1adab911f8089538b2a4e694_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
- Size 1.4MB
- SHA256 d03155b9b6f56dc0dde5df5854a635b8d1f064d8ccd82905a89a128c74cad9d3
- MD5 4673725f1adab911f8089538b2a4e694
- SHA1 6049cc237b5ba5bbcdfd2cc5adf5604a1dbea280
- SHA512 e92a94845b015b0847db9a637a80bee20f27729d748e2a20df0f0b45b10f71881f7777670710d3f3835e932f9bb4f4dab1416456161a8f001b7ff8eb9cad9979
- SSDEEP 24576:c09W8T+KfIGI9pZcTy045HbJiGGC5SYCTyxknw4FYnshx8OfVe247:c09W8jG9pyW04ZXzx4x8EVep
- TLSH T15765AD2DE6A801AAE06A9136EC554306E7B37F15137186CB33A0766A1F775E0CF3EE11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stealc stealer Version 3
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1