Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/04/2026, 22:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_adb0a99849252b9874ee23ce3bb07652_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_adb0a99849252b9874ee23ce3bb07652_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target 2026-04-21_adb0a99849252b9874ee23ce3bb07652_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
- Size 3.4MB
- Sample260421-183mlags4t
- SHA256 d4427b1e278c79615dc66f72eba6b142016532d047b4a0f87c87ef0869846e1f
- MD5 adb0a99849252b9874ee23ce3bb07652
- SHA1 cf47c20e0ca39f82427d124189a21c2b281a7f4b
- SHA512 c97544ca9e65a3af563b3d29f8ae3f892c2758840667fb440d1877a84ce9f21952c2f77f0928e3bab77f1d8462610594843c337d2da1b1af9075e7fe99fc56f0
- SSDEEP 49152:/aW9SViihzJGUP3vZYWnec3q0Z1M9QJM3gjanjksdAM0M:Y1FJ5nM3681dAl
- TLSH T17BF5BE07F355865DD9672D34CAF18782B3B5BC502B29C2CB22952A19DE632F00EBB7D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4320 2026-04-21_adb0a99849252b9874ee23ce3bb07652_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4320 2026-04-21_adb0a99849252b9874ee23ce3bb07652_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-21_adb0a99849252b9874ee23ce3bb07652_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-21_adb0a99849252b9874ee23ce3bb07652_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4320