General
- Target 2026-07-02_0bb3f27863256b6462cd12cef1b65df5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260702-1dxsvsft3s
- SHA256 858161e6a0038e9a43b685fd676f35af9388098a0d3c595196f5a16167693f61
- MD5 0bb3f27863256b6462cd12cef1b65df5
- SHA1 0afc501a6c0ce6b8eee9e3de47218e35734185fd
- SHA512 8d3c537e787c3375b030fa6c4e78174b318db18f406c4a845cc15708bc0cff688ad171e55a3cd32bfebca61f56a5deb065a879e2eca92302f5d6a18fbb9d4f33
- SSDEEP 49152:pynHLkJjuzTqoVyNV3dgM9qPQXnWBuxric/4VKP4bce62OR3FTYX8DT/rsOIG4q4:jGMa04XODTjVJtZTyaW
- TLSH T1EB167B0BE7B941E5C0BBD13D8A569657FAB27849877197CB47A0871A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_0bb3f27863256b6462cd12cef1b65df5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0bb3f27863256b6462cd12cef1b65df5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260630-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0bb3f27863256b6462cd12cef1b65df5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 858161e6a0038e9a43b685fd676f35af9388098a0d3c595196f5a16167693f61
- MD5 0bb3f27863256b6462cd12cef1b65df5
- SHA1 0afc501a6c0ce6b8eee9e3de47218e35734185fd
- SHA512 8d3c537e787c3375b030fa6c4e78174b318db18f406c4a845cc15708bc0cff688ad171e55a3cd32bfebca61f56a5deb065a879e2eca92302f5d6a18fbb9d4f33
- SSDEEP 49152:pynHLkJjuzTqoVyNV3dgM9qPQXnWBuxric/4VKP4bce62OR3FTYX8DT/rsOIG4q4:jGMa04XODTjVJtZTyaW
- TLSH T1EB167B0BE7B941E5C0BBD13D8A569657FAB27849877197CB47A0871A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory