General
- Target 2026-04-15_18f7b873f20b78e2441cbfd715157e3b_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stealc_stop_vidar_wannacry
- Size 4.0MB
- Sample260415-lrwemabs2j
- SHA256 76078e9fbfe5f7f5d9219f4fbcee2b719077784f5b23d72839413f6c37d21c7c
- MD5 18f7b873f20b78e2441cbfd715157e3b
- SHA1 06ff60412f204d44b989b41ba8921ecb2ac1e5b1
- SHA512 7f7034754ef8c005e1ee470de17dde3c5b005efe7c308fec160f477de7836f4edfaa8194050def4ab4062a1f1f2ea38802435f38d894a5f940d152ac7fb9e24b
- SSDEEP 98304:LSERbqSERbwp7m15YSERbqSERbwp7m15H:fm15wm15H
- TLSH T1B3164B117A918031E1736974857AD26D5E797821CB238E8F23841EFDBFF05D0AA3973A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_18f7b873f20b78e2441cbfd715157e3b_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_s.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_18f7b873f20b78e2441cbfd715157e3b_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_s.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_18f7b873f20b78e2441cbfd715157e3b_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stealc_stop_vidar_wannacry
- Size 4.0MB
- SHA256 76078e9fbfe5f7f5d9219f4fbcee2b719077784f5b23d72839413f6c37d21c7c
- MD5 18f7b873f20b78e2441cbfd715157e3b
- SHA1 06ff60412f204d44b989b41ba8921ecb2ac1e5b1
- SHA512 7f7034754ef8c005e1ee470de17dde3c5b005efe7c308fec160f477de7836f4edfaa8194050def4ab4062a1f1f2ea38802435f38d894a5f940d152ac7fb9e24b
- SSDEEP 98304:LSERbqSERbwp7m15YSERbqSERbwp7m15H:fm15wm15H
- TLSH T1B3164B117A918031E1736974857AD26D5E797821CB238E8F23841EFDBFF05D0AA3973A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.