General
- Target 2026-05-16_aaf6bd918df299adfb3ecfd4b124a361_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260516-c716dadv4m
- SHA256 728f1ea5595e6ccd97751ead24e60c3f2de798e438dfd152bc804bf2a3ec272c
- MD5 aaf6bd918df299adfb3ecfd4b124a361
- SHA1 b2b4719253acc776dcca26d0d4a9f161ff0f1adf
- SHA512 abc241baf858f09edf3b362ad945a7723a5263bf21e0afaaf254c39e8d87913c1824992548c1b591a76e6249475be6c8f70d5d33d46df59307e2e2ded8a0d7c6
- SSDEEP 49152:DiF0hMRxuamFJQDN4qMvWXLEPU1iwgMO3rEcSqEEeXzTqzvcvLNiXicJFFRGNzj3:A3jO3riYcv7wRGpj3
- TLSH T1D8167C07E7B540E5C4BAD13D8A979657FAB2785A877197CB07A0871A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-16_aaf6bd918df299adfb3ecfd4b124a361_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_aaf6bd918df299adfb3ecfd4b124a361_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_aaf6bd918df299adfb3ecfd4b124a361_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 728f1ea5595e6ccd97751ead24e60c3f2de798e438dfd152bc804bf2a3ec272c
- MD5 aaf6bd918df299adfb3ecfd4b124a361
- SHA1 b2b4719253acc776dcca26d0d4a9f161ff0f1adf
- SHA512 abc241baf858f09edf3b362ad945a7723a5263bf21e0afaaf254c39e8d87913c1824992548c1b591a76e6249475be6c8f70d5d33d46df59307e2e2ded8a0d7c6
- SSDEEP 49152:DiF0hMRxuamFJQDN4qMvWXLEPU1iwgMO3rEcSqEEeXzTqzvcvLNiXicJFFRGNzj3:A3jO3riYcv7wRGpj3
- TLSH T1D8167C07E7B540E5C4BAD13D8A979657FAB2785A877197CB07A0871A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1