General
- Target 2026-11-05_a27c96d6fce63046beb7be89c8479f4d_cobalt-strike_icedid_luca-stealer_megazord_njrat_ryuk_voidlink
- Size 227KB
- Sample261106-rhz94sds2m
- SHA256 d6aa943e7b696141090fe55c9f5f424e97abc8b52a6b469dff0448e1cf5ad54e
- MD5 a27c96d6fce63046beb7be89c8479f4d
- SHA1 5a3379080ae7b3d44cc6e613a9cce585ab36a21b
- SHA512 fe56050e2159b7d7ce97abebcbe3bda92a246b019dcd3a56f0970d508f0f3dc33af93d7f1acc3059ab45dbf925950b9951d5f9e4f64415b3c94c42d8d45a625f
- SSDEEP 3072:y2NAjIfjHPO/9bridnLXtgu+uVCEgjvaTcxiJTITfjVUnKW27u35GpGkt:j+jrMnLX60kEgjvgcxKTWg2xt
- TLSH T142348C0672E558F5ED77823D89568A06EA737C050321EAEF03E043626F536D19F3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-05_a27c96d6fce63046beb7be89c8479f4d_cobalt-strike_icedid_luca-stealer_megazord_njrat_ryuk_voidlink.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-11-05_a27c96d6fce63046beb7be89c8479f4d_cobalt-strike_icedid_luca-stealer_megazord_njrat_ryuk_voidlink.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Extracted
-
animateclipper
-
update-S-1-5-21-14297136-4737252683-2816350604-2100
-
0x8eb9a56afbe6d79aa90fba9c8f6af7321490c786
-
1B7GRvB1WMZYNCz5FdXocHicUyp8pj1FvX
-
1Ht6TLmpMc3xhN5euPZo5ecC4RJtfJrJu8
-
3BJquhr9pnQhMo1RCPJHsKnrUKgs8StkKT
-
8SjFSqSJ6DYAcBJrNGN76hEhcij5vtyJK5G819CvV7Fm
-
DKSfYvjh8hZwR6q3nNvtKYrgK892groxfd
-
LNMjkFCv1R2T5vwvuXmUFHHeJLmYAdgzX3
-
TSw3kk2GCyUUsGnvR2ZHSNoEaWkhfkGE1J
-
UQCYdXT16Xxzr1qCSVxxntce0-UYXmcqJ_aodkoq39Fv2E6f
-
XdJHMeC11gmiA5rpnJhu9cTax61q333o1g
-
bc1qw8wnedcwur3e4pq6qpdrquxpd09a5lss5glf77
-
cosmos1pgtakf0xe8ehexdgqz9c3lj436wyyg772qec8m
-
ltc1qs9whv7632zyrr828n7e6g5jqtq0ykgklvfm80u
-
qphwpg3ja0awpjt2vrfy5mxmk3h24vrswg9ll9umkm
-
rKaNCgLvMEXxNzMxj2F7FYi1AdRrTo6Nhu
-
auth_token
824c6b4d-4f01-4e22-a500-c7d239e10480
-
contract
0x77c08D8A4Eab268fd5728ae8fE41b1FDE52967dF
-
headers
Authorization: 824c6b4d-4f01-4e22-a500-c7d239e10480
Content-Type: application/x-www-form-urlencoded
Targets
-
- Target 2026-11-05_a27c96d6fce63046beb7be89c8479f4d_cobalt-strike_icedid_luca-stealer_megazord_njrat_ryuk_voidlink
- Size 227KB
- SHA256 d6aa943e7b696141090fe55c9f5f424e97abc8b52a6b469dff0448e1cf5ad54e
- MD5 a27c96d6fce63046beb7be89c8479f4d
- SHA1 5a3379080ae7b3d44cc6e613a9cce585ab36a21b
- SHA512 fe56050e2159b7d7ce97abebcbe3bda92a246b019dcd3a56f0970d508f0f3dc33af93d7f1acc3059ab45dbf925950b9951d5f9e4f64415b3c94c42d8d45a625f
- SSDEEP 3072:y2NAjIfjHPO/9bridnLXtgu+uVCEgjvaTcxiJTITfjVUnKW27u35GpGkt:j+jrMnLX60kEgjvgcxKTWg2xt
- TLSH T142348C0672E558F5ED77823D89568A06EA737C050321EAEF03E043626F536D19F3EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10