General

  • Target
    2026-11-03_3e85e7b101617dfcfe0c8644bd944be6_cobalt-strike_icedid_stealc
  • Size 255KB
  • Sample261104-2xrxds1t5k
  • SHA256 01d517b017a150cb8f06420afb4aeecb923c13c602cadb72e6c0b770d16332c4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • <- NjRAT 0.7d Horror Edition ->

Botnet
  • Victim

C2
  • 1.0.0.721:6522

Mutex
  • 99f38bbe0af13fde32226e71d4a6ac11

Attributes
  • reg_key

    99f38bbe0af13fde32226e71d4a6ac11

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target
      2026-11-03_3e85e7b101617dfcfe0c8644bd944be6_cobalt-strike_icedid_stealc
    • Size 255KB
    • SHA256 01d517b017a150cb8f06420afb4aeecb923c13c602cadb72e6c0b770d16332c4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Detects executables (downlaoders) containing URLs to raw contents of a paste

MITRE ATT&CK Enterprise v16

Tasks