General
- Target 2026-06-28_1be05ae6dc435c0c3e0211dc91d34b7f_cobalt-strike_icedid_luca-stealer_lumma-stealer_njrat_satacom_stealc
- Size 6.8MB
- Sample260630-tmfsdacy6s
- SHA256 71d63f47b763d2de876d5192d154fc442b274e8ee56b33ddca178b5ff9657bbf
- MD5 1be05ae6dc435c0c3e0211dc91d34b7f
- SHA1 0ce65f30adb360647057838c831e2515842161a5
- SHA512 f52ca3d85e9ed19126e5061b9bf772db393c17251227944c9e141dffdff97dc28aec0f522c5752466bda0fc15ffbaebb26e31b83cb167daf41935f5bfea11b14
- SSDEEP 49152:Wok26HVjB9DxeLpf/KYA7A9nO0LJyg6RqRJIS3c26nksdyfXpQWwhJRo6MQ6xOmp:8rIKYIKzc+o0uSsIRBxj6AXEf0/Jxnn
- TLSH T12776D01AA3A400ECC0B7D5B88A175E23EA72785903769BDB17E089556F27BF05F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_1be05ae6dc435c0c3e0211dc91d34b7f_cobalt-strike_icedid_luca-stealer_lumma-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_1be05ae6dc435c0c3e0211dc91d34b7f_cobalt-strike_icedid_luca-stealer_lumma-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_1be05ae6dc435c0c3e0211dc91d34b7f_cobalt-strike_icedid_luca-stealer_lumma-stealer_njrat_satacom_stealc
- Size 6.8MB
- SHA256 71d63f47b763d2de876d5192d154fc442b274e8ee56b33ddca178b5ff9657bbf
- MD5 1be05ae6dc435c0c3e0211dc91d34b7f
- SHA1 0ce65f30adb360647057838c831e2515842161a5
- SHA512 f52ca3d85e9ed19126e5061b9bf772db393c17251227944c9e141dffdff97dc28aec0f522c5752466bda0fc15ffbaebb26e31b83cb167daf41935f5bfea11b14
- SSDEEP 49152:Wok26HVjB9DxeLpf/KYA7A9nO0LJyg6RqRJIS3c26nksdyfXpQWwhJRo6MQ6xOmp:8rIKYIKzc+o0uSsIRBxj6AXEf0/Jxnn
- TLSH T12776D01AA3A400ECC0B7D5B88A175E23EA72785903769BDB17E089556F27BF05F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL