General
- Target 2026-05-23_51ad7081fbae49f54b6bc608ea663fa0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 429KB
- Sample260523-cxtcsadx9t
- SHA256 f34e869b61942764a3f01fd5255258c307c97d040e1aab47fb6e070f20de5ffd
- MD5 51ad7081fbae49f54b6bc608ea663fa0
- SHA1 8d94601e8c7974d98e1ba51bf25f3c1feb3922b3
- SHA512 3a25e6f8378ac694ef1f2700cfa543747a94332750f9580f7b6a6fb952e702d7baa14a7b48d780316fa3931999fd21180677eea843be6505aeecf6dda2c3860a
- SSDEEP 6144:UjhQpktuAsL04LWJ36V4i5ma83wEWXGpKYbGoCpNyCgpxBHQ:Uj4/L7CJ36VF5cwt2wkGLJILQ
- TLSH T1FA947D26E76800FCE1A7D178CA534902D772B8560371EBDF03A89AA61F276D45E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_51ad7081fbae49f54b6bc608ea663fa0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_51ad7081fbae49f54b6bc608ea663fa0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 429KB
- SHA256 f34e869b61942764a3f01fd5255258c307c97d040e1aab47fb6e070f20de5ffd
- MD5 51ad7081fbae49f54b6bc608ea663fa0
- SHA1 8d94601e8c7974d98e1ba51bf25f3c1feb3922b3
- SHA512 3a25e6f8378ac694ef1f2700cfa543747a94332750f9580f7b6a6fb952e702d7baa14a7b48d780316fa3931999fd21180677eea843be6505aeecf6dda2c3860a
- SSDEEP 6144:UjhQpktuAsL04LWJ36V4i5ma83wEWXGpKYbGoCpNyCgpxBHQ:Uj4/L7CJ36VF5cwt2wkGLJILQ
- TLSH T1FA947D26E76800FCE1A7D178CA534902D772B8560371EBDF03A89AA61F276D45E3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.