General
- Target 2026-04-28_936401cbee62e7d36aaad7c9f5aa1963_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 144KB
- Sample260428-cap2vafx3l
- SHA256 8790ae5c7a8c7c70e88fcb952af1172a394b8ffcff5cca26f06ac5283bb43dfb
- MD5 936401cbee62e7d36aaad7c9f5aa1963
- SHA1 2c3d2f10cb248b47f9a626cdbed20f74e2bcb896
- SHA512 58f30a724a5a93161b0b654b9da0bd0f775a7c5121a081a96676f1cb1ece01cbcbf1ff72924a75c65341ee1e17321790884960aac4a451cea7abab1b43603908
- SSDEEP 1536:Y3NQc8mh3l8p1W85gVq3dUYsj+uYbGGMOTHQSODlFtGX4sNIzDd6tzELesW+dX9/:Y3R+0tq1sjxYOmwLJUNIzDstzYXtjn
- TLSH T169E36D5BB3A534F9E1779239C9664A46E772783107609BDF03A446762F233D08E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-28_936401cbee62e7d36aaad7c9f5aa1963_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-28_936401cbee62e7d36aaad7c9f5aa1963_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://discord.com/api/webhooks/1497797872987672706/eNc11F4oRzYs7IGksrYquJKQW0nxLH50R1vnyQQffHL629eghuKgMFA2b7ienJZ-XFSz
Targets
-
- Target 2026-04-28_936401cbee62e7d36aaad7c9f5aa1963_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 144KB
- SHA256 8790ae5c7a8c7c70e88fcb952af1172a394b8ffcff5cca26f06ac5283bb43dfb
- MD5 936401cbee62e7d36aaad7c9f5aa1963
- SHA1 2c3d2f10cb248b47f9a626cdbed20f74e2bcb896
- SHA512 58f30a724a5a93161b0b654b9da0bd0f775a7c5121a081a96676f1cb1ece01cbcbf1ff72924a75c65341ee1e17321790884960aac4a451cea7abab1b43603908
- SSDEEP 1536:Y3NQc8mh3l8p1W85gVq3dUYsj+uYbGGMOTHQSODlFtGX4sNIzDd6tzELesW+dX9/:Y3R+0tq1sjxYOmwLJUNIzDstzYXtjn
- TLSH T169E36D5BB3A534F9E1779239C9664A46E772783107609BDF03A446762F233D08E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.