Analysis
- max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 09:21
General
- Target 2026-11-01_c41f386dd470e2b362c5ef749b8d216c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
- Size 418KB
- Sample261102-lbag8aay6n
- SHA256 d684d074dec812f2f57555248d8f4afb98e7bba99dd19f44c7a734e38cbe010d
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
- Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious behavior: EnumeratesProcesses 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_c41f386dd470e2b362c5ef749b8d216c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-01_c41f386dd470e2b362c5ef749b8d216c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Adds Run key to start application
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Local\Temp\2026-11-01_c41f386dd470e2b362c5ef749b8d216c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exeC:\Users\Admin\AppData\Local\Temp\2026-11-01_c41f386dd470e2b362c5ef749b8d216c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe1⤵
- Adds Run key to start application
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses