General
- Target 2026-05-23_04741f399456e41391114f83d0548a20_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 7.3MB
- Sample260523-rfynhadt2z
- SHA256 1e3fad5178cde230e21a19f6a37f4eed2e5690319a411cb4f323eede73488905
- MD5 04741f399456e41391114f83d0548a20
- SHA1 8516101ad71eb879105aa4a561ee4871521592d8
- SHA512 e4cd226ecd1ec6d140eeec2fa05d11b9ed2457231cbe7d625e054c5039708121f38df55acb30211c02d22f2169860b1338f55679fc869b71253db9ab3ba268e9
- SSDEEP 98304:YSoKVCrmamPkNBCvanOulxFFeKCSN5rfwd6/e0KSA9:YSrkr48rcNCFVCgtOd9
- TLSH T10A76CF16B2A540F8C0B7C5B48A265A23EAB17C5403319BDF17E09A196F37BF16E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-23_04741f399456e41391114f83d0548a20_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_04741f399456e41391114f83d0548a20_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_04741f399456e41391114f83d0548a20_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 7.3MB
- SHA256 1e3fad5178cde230e21a19f6a37f4eed2e5690319a411cb4f323eede73488905
- MD5 04741f399456e41391114f83d0548a20
- SHA1 8516101ad71eb879105aa4a561ee4871521592d8
- SHA512 e4cd226ecd1ec6d140eeec2fa05d11b9ed2457231cbe7d625e054c5039708121f38df55acb30211c02d22f2169860b1338f55679fc869b71253db9ab3ba268e9
- SSDEEP 98304:YSoKVCrmamPkNBCvanOulxFFeKCSN5rfwd6/e0KSA9:YSrkr48rcNCFVCgtOd9
- TLSH T10A76CF16B2A540F8C0B7C5B48A265A23EAB17C5403319BDF17E09A196F37BF16E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE