Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 01:23
Behavioral task
behavioral1
Sample
2026-11-01_fecf5661fa323c13fad9eb40872043ef_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_fecf5661fa323c13fad9eb40872043ef_cobalt-strike_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-11-01_fecf5661fa323c13fad9eb40872043ef_cobalt-strike_icedid_luca-stealer_njrat.exe
- Size 257KB
- Sample261102-bsajfagv3l
- SHA256 6b074a1446d58af4eb6330e11df9137470d3d0d2137a1da1de1c808ce68d2708
- MD5 fecf5661fa323c13fad9eb40872043ef
- SHA1 b621c96116faee41ed25cb0136cba3442a73b254
- SHA512 8b5b9780753a393ab9bba2ad802458bd36bd8d0328537bf75ec3a28426423bad07bb94af066a247e540976eff2a6fb3032e5d792423e71181c865a3d795a6396
- SSDEEP 3072:ALnH03C3Yadf1tn49bBBJbuHhy0N+dfWMPPa/0jccgAhrqV+D8A5nuGOGJcR3Eu:ALnH0ixdd949bBTb81UfWMP/omz5uve
- TLSH T104447D59B7951CF9ED67C13CC9928527E6B278550320CBEF03608A762F236E09D3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: Coffloader
Coffloader is an open-source beacon loader written in C.
- Detects Coffloader 18 IoCs
resource yara_rule behavioral2/memory/6036-3-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-8-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-11-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-13-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-18-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-21-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-23-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-22-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-26-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-28-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-31-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-33-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-36-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-38-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-41-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-43-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-44-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader behavioral2/memory/6036-46-0x00007FF7B0D20000-0x00007FF7B0D7A000-memory.dmp family_coffloader