Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/04/2026, 16:51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-24_e73d41587b3a30d2f0295029abe1bc01_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_e73d41587b3a30d2f0295029abe1bc01_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-24_e73d41587b3a30d2f0295029abe1bc01_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
- Size 21.2MB
- Sample260424-vdbmqsft4p
- SHA256 a61d635ec20b6960dd6287e22645e993e72675ac45569250d512f47c49d2a50b
- MD5 e73d41587b3a30d2f0295029abe1bc01
- SHA1 3c5e13446fd1dca684c026f61d9741fa49964a77
- SHA512 e5ea0cd6846483ce974b1669c74dc6db56293a4171b7bac8c71ad16bd6262966805fd94a1821d47dd6f3fdbaa6962562e8ded14f4a938556afd3ce63b9b892b3
- SSDEEP 393216:FPA+W1U8i9QbKHUVH1kRpe9nk411ZUSKpWVbjkWMWt+zTlvhGeJHaE:41w4K0WRpe9nk4/ZaWeWZiPjH
- TLSH T1102723EA54E512F4E4D38E70A68A13CEB0D1329A4BA99D5F36C51C026B31DDB460EF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral1/memory/4816-0-0x00007FF729760000-0x00007FF72AC96000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL