General
- Target 2026-10-11_8ef8add0198793cab716a231878d0491_cobalt-strike_icedid_luca-stealer_njrat
- Size 283KB
- Sample261012-tpfkdsty5n
- SHA256 5e57a6d2833725dfb0b18129a070210066d1b1841bc2922718ada880881d180d
- MD5 8ef8add0198793cab716a231878d0491
- SHA1 3f51e9ef449eeff7b40f105f26c95b2f5f3a4ae9
- SHA512 86beaf246421fd0d16427797a56ead036b6fce00b4fe511049d9cbc00d960fde929f723021d1a227ad683662cab71663d3198c038b591d86086899f31369ae11
- SSDEEP 3072:Ql7o+erV9wbIDLci6jf+0aF7HqKAg7OqxO1BwMpdCq/IM8uIGfS/y36s1UY6+WSu:9HrvwbI4b+0a8Z1BwMd7wvcg
- TLSH T1A8545C02F76D3DEDE06AC134897185A2AB31FC311750969F52E177662E322D3BD2AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_8ef8add0198793cab716a231878d0491_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_8ef8add0198793cab716a231878d0491_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_8ef8add0198793cab716a231878d0491_cobalt-strike_icedid_luca-stealer_njrat
- Size 283KB
- SHA256 5e57a6d2833725dfb0b18129a070210066d1b1841bc2922718ada880881d180d
- MD5 8ef8add0198793cab716a231878d0491
- SHA1 3f51e9ef449eeff7b40f105f26c95b2f5f3a4ae9
- SHA512 86beaf246421fd0d16427797a56ead036b6fce00b4fe511049d9cbc00d960fde929f723021d1a227ad683662cab71663d3198c038b591d86086899f31369ae11
- SSDEEP 3072:Ql7o+erV9wbIDLci6jf+0aF7HqKAg7OqxO1BwMpdCq/IM8uIGfS/y36s1UY6+WSu:9HrvwbI4b+0a8Z1BwMd7wvcg
- TLSH T1A8545C02F76D3DEDE06AC134897185A2AB31FC311750969F52E177662E322D3BD2AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext