General
- Target 2026-10-25_ac16bce0d2334c5413c29cfcf428e6ea_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 735KB
- Sample261026-txazwae18v
- SHA256 08a960f3e9363352160bc9cd4c7945114b764970a4da926a055ba49441907700
- MD5 ac16bce0d2334c5413c29cfcf428e6ea
- SHA1 10ee5d50a9efdd699547c83cb364714fcafcf403
- SHA512 cd5bb26244a0d757f43a0da8f4580e276d5d53199132b99f05cba160cad92a0d423efa2ea3a43e7b56dd27d7284d9fef3be74fb027cf758b970044108015c194
- SSDEEP 12288:5U8VHX4ZPBuvzkOkW7UE+YTRqwJ4BNv3YZtF15kjH6A:pVH6BuvbkW7xXVVmBl3MA
- TLSH T187F47C1AE7A502F8D5FBC278CA4245D2EBB278155370978F03E11AA51F376E05B3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_ac16bce0d2334c5413c29cfcf428e6ea_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_ac16bce0d2334c5413c29cfcf428e6ea_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
Admin
C2
-
http://45.93.20.198
Attributes
-
url_path
/82878e5702cc452c.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-10-25_ac16bce0d2334c5413c29cfcf428e6ea_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 735KB
- SHA256 08a960f3e9363352160bc9cd4c7945114b764970a4da926a055ba49441907700
- MD5 ac16bce0d2334c5413c29cfcf428e6ea
- SHA1 10ee5d50a9efdd699547c83cb364714fcafcf403
- SHA512 cd5bb26244a0d757f43a0da8f4580e276d5d53199132b99f05cba160cad92a0d423efa2ea3a43e7b56dd27d7284d9fef3be74fb027cf758b970044108015c194
- SSDEEP 12288:5U8VHX4ZPBuvzkOkW7UE+YTRqwJ4BNv3YZtF15kjH6A:pVH6BuvbkW7xXVVmBl3MA
- TLSH T187F47C1AE7A502F8D5FBC278CA4245D2EBB278155370978F03E11AA51F376E05B3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10