General
- Target 2026-05-22_5bc8fe53ae61a63f18489ce065aba07c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry
- Size 5.9MB
- Sample260522-3bm7raf16m
- SHA256 2bb3d5767493082c3271455415f317f149f7f3e8120edf11984d10efb78e4532
- MD5 5bc8fe53ae61a63f18489ce065aba07c
- SHA1 71dc1d135e0f1ced0ec636635540f3eea4e347e4
- SHA512 723728e613ee614c651f92fe8bb3535741c6cc1eadc286d9d8c5717c29a014f9b583a1c0febdee80f36a52fef76814d5c6b30332e0dc551acf4f6ea9c9d4e50c
- SSDEEP 49152:6g4b2tdFrU6auohy3xEkRcqmR6Jeq3qqBrN4M/H54resAmxipvTpg31gb1VWNfcS:1LohyBflN4A5IAmkpvG14VWUy
- TLSH T1A956CF1AA7A501E8C0E7D9B8CA175D13EAB2780513369AEB17E0D9552F23BF05F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-22_5bc8fe53ae61a63f18489ce065aba07c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_5bc8fe53ae61a63f18489ce065aba07c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_5bc8fe53ae61a63f18489ce065aba07c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry
- Size 5.9MB
- SHA256 2bb3d5767493082c3271455415f317f149f7f3e8120edf11984d10efb78e4532
- MD5 5bc8fe53ae61a63f18489ce065aba07c
- SHA1 71dc1d135e0f1ced0ec636635540f3eea4e347e4
- SHA512 723728e613ee614c651f92fe8bb3535741c6cc1eadc286d9d8c5717c29a014f9b583a1c0febdee80f36a52fef76814d5c6b30332e0dc551acf4f6ea9c9d4e50c
- SSDEEP 49152:6g4b2tdFrU6auohy3xEkRcqmR6Jeq3qqBrN4M/H54resAmxipvTpg31gb1VWNfcS:1LohyBflN4A5IAmkpvG14VWUy
- TLSH T1A956CF1AA7A501E8C0E7D9B8CA175D13EAB2780513369AEB17E0D9552F23BF05F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE