General
- Target 2026-04-19_0c7f7862c64c236ddd76be8b8a5a6f77_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry
- Size 6.2MB
- Sample260419-2a876af16x
- SHA256 a2a8871ec8414a44d1e0b2aeb05984172a31d69eb4e9e9d9c024a4bb99f7c373
- MD5 0c7f7862c64c236ddd76be8b8a5a6f77
- SHA1 2f9db09cb6e2ac77cff483b62df7399c7f7f3725
- SHA512 25953293545951ae6b8aca8512917efb244d1c0fc19b3e018dd5416c84261415a284a591bcfef533cb7f0e11fdd2741139da166c639586651b2388de3ce51d5b
- SSDEEP 49152:wl8wjpJHr354wp50snawKvRrvcXiT4vRVT6nksdyqXpQWThgRo+8Q6xOmL2QaHkB:Ro6wp6NMVboBm2slHXxVnvm
- TLSH T17E56C01AA3A401ECC0B7D5B88A175E23EA72785903769BDB17E085552F27BF06F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-04-19_0c7f7862c64c236ddd76be8b8a5a6f77_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_0c7f7862c64c236ddd76be8b8a5a6f77_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_0c7f7862c64c236ddd76be8b8a5a6f77_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry
- Size 6.2MB
- SHA256 a2a8871ec8414a44d1e0b2aeb05984172a31d69eb4e9e9d9c024a4bb99f7c373
- MD5 0c7f7862c64c236ddd76be8b8a5a6f77
- SHA1 2f9db09cb6e2ac77cff483b62df7399c7f7f3725
- SHA512 25953293545951ae6b8aca8512917efb244d1c0fc19b3e018dd5416c84261415a284a591bcfef533cb7f0e11fdd2741139da166c639586651b2388de3ce51d5b
- SSDEEP 49152:wl8wjpJHr354wp50snawKvRrvcXiT4vRVT6nksdyqXpQWThgRo+8Q6xOmL2QaHkB:Ro6wp6NMVboBm2slHXxVnvm
- TLSH T17E56C01AA3A401ECC0B7D5B88A175E23EA72785903769BDB17E085552F27BF06F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE