General
- Target 2026-06-03_4ac05997664a71402425094e076ec59b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260603-sdgsmsh18s
- SHA256 d23f61d38d31475eb49191b170c43454794ce374d0da89f4d595f3c58af328f6
- MD5 4ac05997664a71402425094e076ec59b
- SHA1 9262849c5e396e80a6f09c21c200ea33ffcea806
- SHA512 c67c5a805d74e71fbf23e459241c8713ace59f6255809dc3e678945cb4ea5a2831d67a2a097a771eb73984f73cb990a84bc89035f349da790666609766cc6f2d
- SSDEEP 49152:cTvmAucRCvc8+FtMGcFkB29mgOGYHlFcihUw1cA2TX9O/T3rtgiomvJi:iRfvHTvTxjNi
- TLSH T1BC167C0BE7B941E5C0BBD13D8A579657FAB27849877197CB03A0865A4F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_4ac05997664a71402425094e076ec59b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_4ac05997664a71402425094e076ec59b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 d23f61d38d31475eb49191b170c43454794ce374d0da89f4d595f3c58af328f6
- MD5 4ac05997664a71402425094e076ec59b
- SHA1 9262849c5e396e80a6f09c21c200ea33ffcea806
- SHA512 c67c5a805d74e71fbf23e459241c8713ace59f6255809dc3e678945cb4ea5a2831d67a2a097a771eb73984f73cb990a84bc89035f349da790666609766cc6f2d
- SSDEEP 49152:cTvmAucRCvc8+FtMGcFkB29mgOGYHlFcihUw1cA2TX9O/T3rtgiomvJi:iRfvHTvTxjNi
- TLSH T1BC167C0BE7B941E5C0BBD13D8A579657FAB27849877197CB03A0865A4F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory