General
- Target 2026-10-01_88ef76e758d8ef820830893bbc75f922_cobalt-strike_icedid_njrat_stealc
- Size 3.6MB
- Sample261002-lmydesxtbs
- SHA256 8793c11bc1531cbb29bfba038c3b8c1724e6a973843f5a15b1f5b845e88a0a0f
- MD5 88ef76e758d8ef820830893bbc75f922
- SHA1 51b62aaa2c649fb653e2855d514cfc63b244ad39
- SHA512 981c088382f3df31ca0fed6a168a4df8c5a86effd4fb288c69e1ea03052ba814ac7495b83d4a2b57250acd63350fc8f249836999a41f0a877adda1e8a14b2674
- SSDEEP 98304:4W9hW+5D44GWQs/RJaZ75UDhnZFURRAJ3z3CI:ZzW+5DJ0GJauhZFUQJ3z3
- TLSH T17C06011581C412F5C07BD37881CB4A0FF3A1714A93A64EDF26D198424B93FD3AA7A76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-01_88ef76e758d8ef820830893bbc75f922_cobalt-strike_icedid_njrat_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_88ef76e758d8ef820830893bbc75f922_cobalt-strike_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_88ef76e758d8ef820830893bbc75f922_cobalt-strike_icedid_njrat_stealc
- Size 3.6MB
- SHA256 8793c11bc1531cbb29bfba038c3b8c1724e6a973843f5a15b1f5b845e88a0a0f
- MD5 88ef76e758d8ef820830893bbc75f922
- SHA1 51b62aaa2c649fb653e2855d514cfc63b244ad39
- SHA512 981c088382f3df31ca0fed6a168a4df8c5a86effd4fb288c69e1ea03052ba814ac7495b83d4a2b57250acd63350fc8f249836999a41f0a877adda1e8a14b2674
- SSDEEP 98304:4W9hW+5D44GWQs/RJaZ75UDhnZFURRAJ3z3CI:ZzW+5DJ0GJauhZFUQJ3z3
- TLSH T17C06011581C412F5C07BD37881CB4A0FF3A1714A93A64EDF26D198424B93FD3AA7A76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.