Overview

overview

7

Static

static

3

2026-05-17...lc.exe

windows10-2004-x64

7

2026-05-17...lc.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    132s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    17/05/2026, 10:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
  • Size 1.4MB
  • Sample260517-l8ehfaex91
  • SHA256 9e4b6c3d77885fb55bc781b3ae43d36e5437729a90eb62024f70e1e59cf773a9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3384
    • C:\Users\Admin\AppData\Local\Temp\2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealcw.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealcw.exe" --supervisor --main-pid 3384 --main-exe "C:\Users\Admin\AppData\Local\Temp\2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe" --generation 3384-240664046 --nonce 3985207922998078531 --path-hash 2727289915714931644
      2⤵
      • Executes dropped EXE
      PID:840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealcw.exe
        • Path C:\Users\Admin\AppData\Local\Temp\2026-05-17_6de25cae18b24be1685e94f31781edf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealcw.exe
        • Size 1.4MB
        • SHA256 9e4b6c3d77885fb55bc781b3ae43d36e5437729a90eb62024f70e1e59cf773a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 580a5517c698171ae230f4ae505bfa6b3d457fb914a887e47b4ffce983d23050
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 91b11bdbb62efe14d58d363ebaab03a42e60ec1ee59ef230c7850dcec855f49b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 811d2999e45bde50cf4726e556cdfa7e27db1c755fff0d7e3a52712503d75e45
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 387445b81ad803042338f7f8c429993fb94e24886041ef91d604a9818a633520
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 0aa7a57175c3153402ba6e58751f6463611d5f2b88446a3f2ef984ec9bc1bd73
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 9bb1fe65404d669ecd61984196791eaf602639bdb65d596e53851d1a919a8b07
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 fec68921343ce8c4f60b446f671e9eeda51d399f9803dfc03e1e80a9595d4497
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 ea34361c1698e4cf67a4c1574b34c755ea003058fac4366cff7b67c6363fe884
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 b4249fd6feae6b95af0137134edce1f9856179a28aba2b67da0491937fdce7c4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 f3dbd61e5080b9e5e2f29fe31ccb121c298042a2b01574ff3caf2cb64f886ea0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 3d2c18fdf077ffca694b44ba3f9291eca58cf91098b30abfba7d8cdf9d0bbdc1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 bba2fad4366787c15537aa86b9335cb81fa1337cf0778827ca843cd8413114ba
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 22d8c157e8e624a799d43ac9b2807cdfd703079e46b436db9d23064ba0f2e155
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 23c8b791a3445d8cd071cd60e02a60f5a49b1f60a98b188b340187ab2ed6505a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 47266f31f0e4b3a8d04e2460b4e44f6c890df897d4b99d6d634543cdc01061df
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 7d000d0b77d246bf297b018bc5171b405a7a582b0441ea26460814b9e34b8335
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 3b180c2f00c933d184bbdd1c0697c4041dd370ec915d058423ae0358f957a140
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 09d212ef1b37ebbe90aadfb45c7da8be363d9601f2b57cfa4c3f32e96a0ef6f1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 e4d861831feb538564b59a7a78dabdcd3b498da1bc1b5bef3b51391c6bd76297
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 6644dbcb254bc58b32ebe70e23899e4134d1783e9f7c09377138280df502cf6d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 57413c039c541d53bb6ea24e2d50424dcfdeee8b382f2765650c9b2924b67d44
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 bf0a4a5d7d7741273e8fba91a346e3e2b49d0f8edbf973c27a712aa1d5708623
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 ab362ba2f58d35ebe377501e6e3cbd3a9a640b718f6e877db92264ac87ecc665
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 930bc3641b2c58561f923d24bf43467596e6010ecd99a3c14cd9a594eabaf3c3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 438c03a9b4f47679110a596de724f8927a2360c99c6bc908be13bdcb1b738ff7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 aae30044a988697c09c4fe89e2d1374caeab7cc8ef133255a6be36d1b394e9a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 1e5af2469b9421daab7a5eebb65b9e929e29a65a86132a52dbdd6d88ff4bd81c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 ccfca1aedfa399c4074c6bba8dc1320e9d969a9b304e2b3caddfc8690826aa37
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 af2a6d1ad1ea4fcecc847295d8883cde272345d25b7538b74dfacc3f6e7eea03
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 e47d8b4b0cea12eb30649b976bc5beceaa102b9b48b3c4bb1d3b96d33fe38451
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 ad055ba194524813d5fcad0938804bfc03b0749bc8f1ff3572067893ebb07637
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 c451ddec195c4b2481eabeec5c21da2a80ffa798c6a2ddd09037638c250c6793
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 2c3fa900198af0e078c84b6d154ffaacfd31fff9156846cf933a41546d866f35
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 d99b3045e8bfca80dd2bbbae2c1dc6b621ad6b7d77fce09d187c64710dfe5594
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 5a3d597a14da7fd45e8af78def44a3a3e7c78fc906322d8ef2c911b7e257873a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 d657f22ea47fa0071c4974172de8f0f6999e35b80b417236649fd18f522d41bc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 97cc921a1ba1284a18ac11df5811a3d99635cd300f16622ea53a9879d1aac5cf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 bd75b0652e7cac3b6c279c4c32a62e796610f03593c2208bb99d5873c7b17130
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 5a6fa5d93d57f6ccfe3a815af6e66d2c0019c28d88907383410dcfa43cd0ee5f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 1fe55d8ca815be3689b7e3a01602f697433929f5ad5c5c34408b4b44e5562f37
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 8021b0e4ce71ceacc5c6a7f925fc6e4f41338ba2a9f5f554a71ef46f584f8a44
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 4ee521c5bb097e4edb221d1a4d144e2741a71b7828beac5d899c37196e8e51eb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 636926bd2d8880ee139b1536e2c42287f912f12cc913f4f77032c8f9ede8731d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 50e6661f6a5a41ced65881c51b77f9e1cb14a1c15782e296cd9eaa449d5a05bf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 7a599de9d10406f8ac9688004ba4ed3edd37262e0ba25b581ec81dfb8e429a74
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 6c5e604f04d106ffd37e86d919f9fdf62f39896083a240e7eaf67d3e8170d30c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 b285d50e1d482767273d0e5daf425d66cf642aa39c23388dd503fb3c73c978a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 6cada687ebec519c3cf45e66b24d04e1f7db1324f489cdc239f2ec60f84f8f13
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 6accbbade6edf270539d9bb68d49bf0bdf6c191c86e978f7cdda644be355afba
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 19d0cedf5dcc557060e0b08ef47511e01af174f9daeed292ba7849840e30166c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 edb8a72146c2bb8a8fc15fa8dd087cbdbc73aa795badf730100e86cdaa1e1666
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 e958ebbcdf32b7f7aa39c2cfb07c92b3ffce13db782781244b5d0172a1ecb7b5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 86a05e40a26a7b04fc704cccf20e0c6228c0f33b7d97fc01d601228023d73f10
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 b36004a27181d2aebe71565716c94b43d3f4baa866a3db66e125d11012f8b05d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 ac5355cde4cdd6e47c4cee4230cf7c02e42b34c3189d3a9ac66fa8d33701517b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 e092460b6e8f3034a9bf9601abc37305ac90c6b45d6af69096aecb3b4b34659c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 b47817655ab6def2886a259797426361ee2439c7d9a91a046a715fb8edd42341
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 e03bff520ef3279850a03c7967efc1d0a34b0ffd564a4575a4c29c6576757cd5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 840949922a70f8fa4d69b850fdb28cd44a6f891ed93b0480ed4fd6398da82621
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 3e0eac8b8748102ec5b63019493c667ff7c42ecaec1323f26fa1b2048a29fdca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pq_main_heartbeat_3384.state
        • Path C:\Users\Admin\AppData\Local\Temp\pq_main_heartbeat_3384.state
        • Size 65B
        • SHA256 fa4e9ac652723844312e9622a16e20b9c14eeaf471987b0eb7c87ee21fddd658
        • MD5 SHA1 SHA512 TLSH
        Submit Download