General
- Target 2026-05-16_8f96028a94a8f4eb2ef02e8390d37eab_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 1.3MB
- Sample260516-fsdcjsaz5x
- SHA256 810e48416f0533b630dc778ee617145c3aecb72edac1dae657ab1f2b5c8f6d48
- MD5 8f96028a94a8f4eb2ef02e8390d37eab
- SHA1 d9ee7c9fcb3d857e64a5421139295eae68d2c9e9
- SHA512 957ec14b32206ff7e752cedc926f18238537c8bb40efe92a57007aeef83c418702c47db93c2e822567d0c3995f8b350fad0689c2de6258100daf2237f28f0400
- SSDEEP 24576:gpDN5RAR5EMScXi0K49rTyVI6ieXnmcLDA:gpDN5SR5ScXi07yYSnvPA
- TLSH T1A355AF4D73A841FCD0A7D1B5DAA1690BEB707459072089FB83E80E192F637E49A7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-16_8f96028a94a8f4eb2ef02e8390d37eab_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_8f96028a94a8f4eb2ef02e8390d37eab_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_8f96028a94a8f4eb2ef02e8390d37eab_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 1.3MB
- SHA256 810e48416f0533b630dc778ee617145c3aecb72edac1dae657ab1f2b5c8f6d48
- MD5 8f96028a94a8f4eb2ef02e8390d37eab
- SHA1 d9ee7c9fcb3d857e64a5421139295eae68d2c9e9
- SHA512 957ec14b32206ff7e752cedc926f18238537c8bb40efe92a57007aeef83c418702c47db93c2e822567d0c3995f8b350fad0689c2de6258100daf2237f28f0400
- SSDEEP 24576:gpDN5RAR5EMScXi0K49rTyVI6ieXnmcLDA:gpDN5SR5ScXi07yYSnvPA
- TLSH T1A355AF4D73A841FCD0A7D1B5DAA1690BEB707459072089FB83E80E192F637E49A7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1