General
- Target 2026-09-25_966c3a664c3ff1b1e7efe45155a02f32_cobalt-strike_icedid_luca-stealer_njrat
- Size 157KB
- Sample260925-2jae7a1vdv
- SHA256 1d3212a429c9b758ac2ce97ee4856f3646a831ec82d3a98333c74e18e535876c
- MD5 966c3a664c3ff1b1e7efe45155a02f32
- SHA1 b40a792cdf8e992de6db76fe31b67d26b633bdf9
- SHA512 755f50e2f6f9210c11864c267026dc5a2cbe121f6366ab7ab1cd839a912c6aa0caad65ca8084881b8cc0e7e207a153c85a486cbce7ce95f78257d24df6c21d3d
- SSDEEP 3072:qszYK3v0fwTiygMQjr1omvATEOGKBJ+Ea1XXGooR79nri:dZfgw2QAiTbGKPSFK7Vri
- TLSH T19DF37D5BB3A520F5E4778238C8A10A06F772783547209BEF47A447765F232D1AD3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_966c3a664c3ff1b1e7efe45155a02f32_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_966c3a664c3ff1b1e7efe45155a02f32_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_966c3a664c3ff1b1e7efe45155a02f32_cobalt-strike_icedid_luca-stealer_njrat
- Size 157KB
- SHA256 1d3212a429c9b758ac2ce97ee4856f3646a831ec82d3a98333c74e18e535876c
- MD5 966c3a664c3ff1b1e7efe45155a02f32
- SHA1 b40a792cdf8e992de6db76fe31b67d26b633bdf9
- SHA512 755f50e2f6f9210c11864c267026dc5a2cbe121f6366ab7ab1cd839a912c6aa0caad65ca8084881b8cc0e7e207a153c85a486cbce7ce95f78257d24df6c21d3d
- SSDEEP 3072:qszYK3v0fwTiygMQjr1omvATEOGKBJ+Ea1XXGooR79nri:dZfgw2QAiTbGKPSFK7Vri
- TLSH T19DF37D5BB3A520F5E4778238C8A10A06F772783547209BEF47A447765F232D1AD3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Outbound SSH connection to public host
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.