General
- Target 2026-11-03_7a235cacb19520bdb101ed18afb742d0_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 539KB
- Sample261104-tsrf3adh78
- SHA256 a2b9759904891626c673025ef8bb93f8cb478f578861bba0236e749275b52e52
- MD5 7a235cacb19520bdb101ed18afb742d0
- SHA1 f4059d495a04db6e2f0838f14925d44dd255d5d5
- SHA512 b3ee613c4e2f7cd5f4d5b891241941ff4daec3bb075c68f7ac39d6e39066a4789f3059fc4faa5d7bd9af4ca3238140d8e4010eb6a2bfe99b04cf49e1d8ec8b60
- SSDEEP 6144:E5emOjTG4Z2cOAw89gzG1cFKxcWbAposLiZ1JcymWncOG+43ITaN461IwppFGqJs:8eTRt+847SJcymJ7I+N71I+vrJs
- TLSH T130C4293A965806BCE1A6C1B9CE864D13E735780E07B169FF17D049A25D2B1E09F3E723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_7a235cacb19520bdb101ed18afb742d0_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_7a235cacb19520bdb101ed18afb742d0_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_7a235cacb19520bdb101ed18afb742d0_cobalt-strike_icedid_luca-stealer_njrat_stealc
- Size 539KB
- SHA256 a2b9759904891626c673025ef8bb93f8cb478f578861bba0236e749275b52e52
- MD5 7a235cacb19520bdb101ed18afb742d0
- SHA1 f4059d495a04db6e2f0838f14925d44dd255d5d5
- SHA512 b3ee613c4e2f7cd5f4d5b891241941ff4daec3bb075c68f7ac39d6e39066a4789f3059fc4faa5d7bd9af4ca3238140d8e4010eb6a2bfe99b04cf49e1d8ec8b60
- SSDEEP 6144:E5emOjTG4Z2cOAw89gzG1cFKxcWbAposLiZ1JcymWncOG+43ITaN461IwppFGqJs:8eTRt+847SJcymJ7I+N71I+vrJs
- TLSH T130C4293A965806BCE1A6C1B9CE864D13E735780E07B169FF17D049A25D2B1E09F3E723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1