General

  • Target
    2026-10-22_d0dd7a24fbbc4816d963849b787419b9_cobalt-strike_icedid_luca-stealer_njrat
  • Size 185KB
  • Sample261023-yd2eyadv2v
  • SHA256 9140e874526af161fa396ee2f52147bc351c21716b582f6707c1cf3ab95a7070
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-22_d0dd7a24fbbc4816d963849b787419b9_cobalt-strike_icedid_luca-stealer_njrat
    • Size 185KB
    • SHA256 9140e874526af161fa396ee2f52147bc351c21716b582f6707c1cf3ab95a7070
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Adds Run key to start application

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks