General
- Target 2026-10-14_2247e4db3ef143cf011081ef3a129489_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 735KB
- Sample261015-b1q66ady71
- SHA256 c795522f3cade38a6cad4e9ba97486477acbf7ab13065fcdc41c8e4e4a3f6426
- MD5 2247e4db3ef143cf011081ef3a129489
- SHA1 ace7ca04ac1e5916170169e9a1021e7291bbbbca
- SHA512 d7974b545d2104f238fd0a34ad06353eb9151dc72c01573c87bf9934ca25a8531ca47f1f963d63e5a41d58bc7a47d83e0ac28da844b6f434410ef9dd4ca8168c
- SSDEEP 12288:aU8VHX4ZtBuvzkOkW7UE+YTRqwJ40jTv3YZtF15kjHKA:gVH4BuvbkW7xXVVmSr3UA
- TLSH T11FF48D5AE7A502F8D0BBC178CE424553EBB2B8055770978F03E15AA61F376A05F3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-14_2247e4db3ef143cf011081ef3a129489_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_2247e4db3ef143cf011081ef3a129489_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
crypted
C2
-
http://196.251.107.23
Attributes
-
url_path
/7ffc7a279c17c091.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-10-14_2247e4db3ef143cf011081ef3a129489_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 735KB
- SHA256 c795522f3cade38a6cad4e9ba97486477acbf7ab13065fcdc41c8e4e4a3f6426
- MD5 2247e4db3ef143cf011081ef3a129489
- SHA1 ace7ca04ac1e5916170169e9a1021e7291bbbbca
- SHA512 d7974b545d2104f238fd0a34ad06353eb9151dc72c01573c87bf9934ca25a8531ca47f1f963d63e5a41d58bc7a47d83e0ac28da844b6f434410ef9dd4ca8168c
- SSDEEP 12288:aU8VHX4ZtBuvzkOkW7UE+YTRqwJ40jTv3YZtF15kjHKA:gVH4BuvbkW7xXVVmSr3UA
- TLSH T11FF48D5AE7A502F8D0BBC178CE424553EBB2B8055770978F03E15AA61F376A05F3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10