General
- Target 2026-10-11_97db7a3c8cfb49e326acbfe81dafcfc2_cobalt-strike_icedid_luca-stealer_njrat
- Size 245KB
- Sample261012-ss7bvaea23
- SHA256 d99ef719ecae32fcfcb7954f3477b07130feb3392c7c4103de881a9eb3a27a2d
- MD5 97db7a3c8cfb49e326acbfe81dafcfc2
- SHA1 947c36a3bb814c1b09639a8c8236161247581cba
- SHA512 94c88cfb5ad37dee96b1b36e409218ab839e38628a38c06f90a72b549f25131988a8a98a381966224be6dafb716c88e35dc37c944c434a760b12a0c7bfeb381d
- SSDEEP 6144:y0kDqUfkkoN7ZOUL/PE53LgqQBatlLHrJ:y01k6E572mL
- TLSH T13D34CF1BB7A530F9E5B39238C9605A46E772783217205BEF03A447761F236D18D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_97db7a3c8cfb49e326acbfe81dafcfc2_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
adaptixc2
C2
-
secure.nxbase.im
Attributes
-
port
443
-
url_path
/updates/check.php
-
user_agent
Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0
Targets
-
- Target 2026-10-11_97db7a3c8cfb49e326acbfe81dafcfc2_cobalt-strike_icedid_luca-stealer_njrat
- Size 245KB
- SHA256 d99ef719ecae32fcfcb7954f3477b07130feb3392c7c4103de881a9eb3a27a2d
- MD5 97db7a3c8cfb49e326acbfe81dafcfc2
- SHA1 947c36a3bb814c1b09639a8c8236161247581cba
- SHA512 94c88cfb5ad37dee96b1b36e409218ab839e38628a38c06f90a72b549f25131988a8a98a381966224be6dafb716c88e35dc37c944c434a760b12a0c7bfeb381d
- SSDEEP 6144:y0kDqUfkkoN7ZOUL/PE53LgqQBatlLHrJ:y01k6E572mL
- TLSH T13D34CF1BB7A530F9E5B39238C9605A46E772783217205BEF03A447761F236D18D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE