General
- Target 2026-10-15_f1d38180fd4633a1ee35763c30626f10_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 735KB
- Sample261015-3a83tses2y
- SHA256 3aef2a16952911e03f5064b58a21e2c5a8002f26833abf8cd6ca2e2b5b8913e7
- MD5 f1d38180fd4633a1ee35763c30626f10
- SHA1 bb55db98c57c485bc0ca26716186c808cbc96746
- SHA512 5e50b89489e37acd97cea90cd132508d163f9482ee1b15a9f9f1bf25b75e67060834b1459c143e26a78eb02269b1a8c9e232baf724c92f6340145abf4ba91243
- SSDEEP 12288:jU8VHX4ZPBuvzkOkW7UE+YTRqwJ4m5v3YZtF15kjHiA:HVH6BuvbkW7xXVVmmR3kA
- TLSH T1C5F48D1AE3A582F8D0BBC179CE424552EBB27915537096CF03E15AA51F372A07F3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-15_f1d38180fd4633a1ee35763c30626f10_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-15_f1d38180fd4633a1ee35763c30626f10_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
Kassay
C2
-
http://62.164.177.35
Attributes
-
url_path
/be1577246a994a10.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-10-15_f1d38180fd4633a1ee35763c30626f10_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 735KB
- SHA256 3aef2a16952911e03f5064b58a21e2c5a8002f26833abf8cd6ca2e2b5b8913e7
- MD5 f1d38180fd4633a1ee35763c30626f10
- SHA1 bb55db98c57c485bc0ca26716186c808cbc96746
- SHA512 5e50b89489e37acd97cea90cd132508d163f9482ee1b15a9f9f1bf25b75e67060834b1459c143e26a78eb02269b1a8c9e232baf724c92f6340145abf4ba91243
- SSDEEP 12288:jU8VHX4ZPBuvzkOkW7UE+YTRqwJ4m5v3YZtF15kjHiA:HVH6BuvbkW7xXVVmmR3kA
- TLSH T1C5F48D1AE3A582F8D0BBC179CE424552EBB27915537096CF03E15AA51F372A07F3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10