General
- Target 2026-09-15_b8ab3363d7d0122c12eecd7190be6682_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- Sample260915-shlmdsyfkd
- SHA256 5574055a5c73c31c537f43eb2d56add9b112a1f942dc32a2c766ecb0cb0ea05b
- MD5 b8ab3363d7d0122c12eecd7190be6682
- SHA1 3f77078cd8c2b4372481792dd70902f9343a2353
- SHA512 b63f13a68fda46868ff7512fd3e5b0c50bb41b9c8d6704b6cebc1595c1f37d3ea3639fd7da4f584788ba8e7a345384a55049248588008392861ccf854b628626
- SSDEEP 24576:ppXA4dQoRbeIzW4iEZ31m2Rx2+siA/s8:ppHDiEB1vRYd/
- TLSH T1F915F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-15_b8ab3363d7d0122c12eecd7190be6682_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-15_b8ab3363d7d0122c12eecd7190be6682_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-15_b8ab3363d7d0122c12eecd7190be6682_cobalt-strike_icedid_luca-stealer_njrat
- Size 936KB
- SHA256 5574055a5c73c31c537f43eb2d56add9b112a1f942dc32a2c766ecb0cb0ea05b
- MD5 b8ab3363d7d0122c12eecd7190be6682
- SHA1 3f77078cd8c2b4372481792dd70902f9343a2353
- SHA512 b63f13a68fda46868ff7512fd3e5b0c50bb41b9c8d6704b6cebc1595c1f37d3ea3639fd7da4f584788ba8e7a345384a55049248588008392861ccf854b628626
- SSDEEP 24576:ppXA4dQoRbeIzW4iEZ31m2Rx2+siA/s8:ppHDiEB1vRYd/
- TLSH T1F915F142779716EAE6738D3889A2D312EF32F8560B65D7CF63900EE52D232D01D39B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Looks for VirtualBox Guest Additions in registry
Looks for VMWare Tools registry key
Suspicious use of NtSetInformationThreadHideFromDebugger