General
- Target 2026-11-03_3e85e7b101617dfcfe0c8644bd944be6_cobalt-strike_icedid_stealc
- Size 255KB
- Sample261104-2xrxds1t5k
- SHA256 01d517b017a150cb8f06420afb4aeecb923c13c602cadb72e6c0b770d16332c4
- MD5 3e85e7b101617dfcfe0c8644bd944be6
- SHA1 8946afe1386a14713f9af9cc758a717676b55b1e
- SHA512 6a264bdce9e305fbc8fb94950b0006515ce78fbbadd5ac89d1b923b665c1cdad8b3e97c67d3461938905c3283090cf016dc9eec4eed809c51d82fcf83a475705
- SSDEEP 3072:MGCpqdxFJdeAAOhSr+dIt1O3MoIkmcZgfqA5yBTuaQmQ62gKOxP08uTuJqA8JxhZ:MGCpqfFxAOhSrLDYMGd98grXAxO4NEc
- TLSH T132441C026F6CB0ABC077A272E1024D12DFB73465472525EA46E9C5EA3FA10D9DF3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_3e85e7b101617dfcfe0c8644bd944be6_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
1.0.0.721:6522
Mutex
-
99f38bbe0af13fde32226e71d4a6ac11
Attributes
-
reg_key
99f38bbe0af13fde32226e71d4a6ac11
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target 2026-11-03_3e85e7b101617dfcfe0c8644bd944be6_cobalt-strike_icedid_stealc
- Size 255KB
- SHA256 01d517b017a150cb8f06420afb4aeecb923c13c602cadb72e6c0b770d16332c4
- MD5 3e85e7b101617dfcfe0c8644bd944be6
- SHA1 8946afe1386a14713f9af9cc758a717676b55b1e
- SHA512 6a264bdce9e305fbc8fb94950b0006515ce78fbbadd5ac89d1b923b665c1cdad8b3e97c67d3461938905c3283090cf016dc9eec4eed809c51d82fcf83a475705
- SSDEEP 3072:MGCpqdxFJdeAAOhSr+dIt1O3MoIkmcZgfqA5yBTuaQmQ62gKOxP08uTuJqA8JxhZ:MGCpqfFxAOhSrLDYMGd98grXAxO4NEc
- TLSH T132441C026F6CB0ABC077A272E1024D12DFB73465472525EA46E9C5EA3FA10D9DF3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables (downlaoders) containing URLs to raw contents of a paste