General
- Target 2026-11-03_3d17bc038251adb381d4cb4a3b7eb135_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 957KB
- Sample261104-24f4gaeh67
- SHA256 4b57c3980e0e46e1fdd66ec1ae5029e5c27b2dcb051ba6e1ffcd56e9547c34e7
- MD5 3d17bc038251adb381d4cb4a3b7eb135
- SHA1 d0de622b226ba0c348d7b5d3c76c5112c5fee7dd
- SHA512 2af85eecff78287f64b0c361fec323674123d82bbe50b084f867268844fa54eb53aa09528dee1615d9e57fc76e80ceae4452753791fdfcd40ff7c18532107cba
- SSDEEP 24576:Gnx3QSV8LObcYaVRPWxNs298r3OCDIjG3gE9ow+8xA+:GnxrV8LOKR+ft983Dl3gEe8xA+
- TLSH T15225F01DE79955F6E6BBD17CC8924106E6723C468BB1D3CF03A209962E337D09E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_3d17bc038251adb381d4cb4a3b7eb135_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_3d17bc038251adb381d4cb4a3b7eb135_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 957KB
- SHA256 4b57c3980e0e46e1fdd66ec1ae5029e5c27b2dcb051ba6e1ffcd56e9547c34e7
- MD5 3d17bc038251adb381d4cb4a3b7eb135
- SHA1 d0de622b226ba0c348d7b5d3c76c5112c5fee7dd
- SHA512 2af85eecff78287f64b0c361fec323674123d82bbe50b084f867268844fa54eb53aa09528dee1615d9e57fc76e80ceae4452753791fdfcd40ff7c18532107cba
- SSDEEP 24576:Gnx3QSV8LObcYaVRPWxNs298r3OCDIjG3gE9ow+8xA+:GnxrV8LOKR+ft983Dl3gEe8xA+
- TLSH T15225F01DE79955F6E6BBD17CC8924106E6723C468BB1D3CF03A209962E337D09E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1