General
- Target 2026-06-04_946d9de438b832387a08a9e7fb639d5b_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 8.8MB
- Sample260604-e3spjsaz6p
- SHA256 a3ad318cb1d5bd4f2547644220212c789c88c4c24d0a04a739627f15b7711809
- MD5 946d9de438b832387a08a9e7fb639d5b
- SHA1 a669df4d06b9fccfa8ad9bbe016fd13dc42eaa18
- SHA512 502872db7f89c844dfee03d4dfc3affe3b7f0ab5c28bcbcb10d06e4986218257c5ebcb9a9caa9246d91674405fd1ad85e707be24408a13f538cef7a39723af83
- SSDEEP 196608:DsNBBbDH6uewlLU3hKdVaTbrkF5aXMEtvPuAcbBS5l+x2:DsBn/xVafOEtvncE7
- TLSH T19F9612A9A29833ACC42BC4748433FD04B2B1661E07E5D6EB71D7BAD077668E0D536B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-04_946d9de438b832387a08a9e7fb639d5b_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_946d9de438b832387a08a9e7fb639d5b_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_946d9de438b832387a08a9e7fb639d5b_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 8.8MB
- SHA256 a3ad318cb1d5bd4f2547644220212c789c88c4c24d0a04a739627f15b7711809
- MD5 946d9de438b832387a08a9e7fb639d5b
- SHA1 a669df4d06b9fccfa8ad9bbe016fd13dc42eaa18
- SHA512 502872db7f89c844dfee03d4dfc3affe3b7f0ab5c28bcbcb10d06e4986218257c5ebcb9a9caa9246d91674405fd1ad85e707be24408a13f538cef7a39723af83
- SSDEEP 196608:DsNBBbDH6uewlLU3hKdVaTbrkF5aXMEtvPuAcbBS5l+x2:DsBn/xVafOEtvncE7
- TLSH T19F9612A9A29833ACC42BC4748433FD04B2B1661E07E5D6EB71D7BAD077668E0D536B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects command variations typically used by ransomware
- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
- Custom signature
Detects executables packed with VMProtect.