General

  • Target
    2026-11-03_7a235cacb19520bdb101ed18afb742d0_cobalt-strike_icedid_luca-stealer_njrat_stealc
  • Size 539KB
  • Sample261104-tsrf3adh78
  • SHA256 a2b9759904891626c673025ef8bb93f8cb478f578861bba0236e749275b52e52
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-03_7a235cacb19520bdb101ed18afb742d0_cobalt-strike_icedid_luca-stealer_njrat_stealc
    • Size 539KB
    • SHA256 a2b9759904891626c673025ef8bb93f8cb478f578861bba0236e749275b52e52
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes a file named after a Windows system binary

      The file runs from a user directory while carrying the name of an executable that normally only exists in System32.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks