General
- Target 2026-10-22_d0dd7a24fbbc4816d963849b787419b9_cobalt-strike_icedid_luca-stealer_njrat
- Size 185KB
- Sample261023-yd2eyadv2v
- SHA256 9140e874526af161fa396ee2f52147bc351c21716b582f6707c1cf3ab95a7070
- MD5 d0dd7a24fbbc4816d963849b787419b9
- SHA1 cc621b4ca8252b55612552ca8e24cefa21d8001d
- SHA512 22a547595248cb7cbec750e923b2f01c7bb94a55f1cf7a2d6fab30f3e078a8929cf1be2285bd1becb3bab150d38c627b8d5764f1f287caef10474241f5f45b18
- SSDEEP 3072:KOqpw/RWB1pIwuMw0HhPmmoycUfWtTQMA06cqk/INJWqw62:/jUBIwuz0JBoFUfghY7C6
- TLSH T159045B45B3A500FAE177C17889A11916F7B2781507209BEF07A443B6EF277E06D3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_d0dd7a24fbbc4816d963849b787419b9_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_d0dd7a24fbbc4816d963849b787419b9_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_d0dd7a24fbbc4816d963849b787419b9_cobalt-strike_icedid_luca-stealer_njrat
- Size 185KB
- SHA256 9140e874526af161fa396ee2f52147bc351c21716b582f6707c1cf3ab95a7070
- MD5 d0dd7a24fbbc4816d963849b787419b9
- SHA1 cc621b4ca8252b55612552ca8e24cefa21d8001d
- SHA512 22a547595248cb7cbec750e923b2f01c7bb94a55f1cf7a2d6fab30f3e078a8929cf1be2285bd1becb3bab150d38c627b8d5764f1f287caef10474241f5f45b18
- SSDEEP 3072:KOqpw/RWB1pIwuMw0HhPmmoycUfWtTQMA06cqk/INJWqw62:/jUBIwuz0JBoFUfghY7C6
- TLSH T159045B45B3A500FAE177C17889A11916F7B2781507209BEF07A443B6EF277E06D3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1