General
- Target 2026-10-22_9b8abb35703acb61234f47f33fcab623_cobalt-strike_icedid_luca-stealer_njrat
- Size 235KB
- Sample261024-ds7kaafv2s
- SHA256 d22a653f32c377195b875902c838ff2dfd576f4714d55ce4915569394f127a3d
- MD5 9b8abb35703acb61234f47f33fcab623
- SHA1 626a80fe1d24a2d97d32c6536e95cf1cceab76cc
- SHA512 714efe8eda0d4531a1e7e4faed8e3e258fcd650cc0cf350207a296fd70ad5a244cddbc44f57a4ac955a3c7d83df8ef4903539654478807007699bf685abe71d4
- SSDEEP 3072:J3TW5Vp4VXE5gLWTWPxB8s74Uh0rhchkSeDHvrp1gLWy/xllC2rwK:J3TIVpgE5uWyPxB8c4weSEey
- TLSH T1BB348C4573E50CF9F5B78239CD625606D6723C511760EBDF07A046AAAF23AE04D3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9b8abb35703acb61234f47f33fcab623_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9b8abb35703acb61234f47f33fcab623_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9b8abb35703acb61234f47f33fcab623_cobalt-strike_icedid_luca-stealer_njrat
- Size 235KB
- SHA256 d22a653f32c377195b875902c838ff2dfd576f4714d55ce4915569394f127a3d
- MD5 9b8abb35703acb61234f47f33fcab623
- SHA1 626a80fe1d24a2d97d32c6536e95cf1cceab76cc
- SHA512 714efe8eda0d4531a1e7e4faed8e3e258fcd650cc0cf350207a296fd70ad5a244cddbc44f57a4ac955a3c7d83df8ef4903539654478807007699bf685abe71d4
- SSDEEP 3072:J3TW5Vp4VXE5gLWTWPxB8s74Uh0rhchkSeDHvrp1gLWy/xllC2rwK:J3TIVpgE5uWyPxB8c4weSEey
- TLSH T1BB348C4573E50CF9F5B78239CD625606D6723C511760EBDF07A046AAAF23AE04D3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.