General
- Target 2026-07-12_324ab4bdc3faa64c8176066bd3806b47_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 765KB
- Sample260712-q21vbacz9z
- SHA256 80c8bbeb2ecebf8680dcef93043a5ecdf83d7d071ac5ef83d9ec5eb07b941b99
- MD5 324ab4bdc3faa64c8176066bd3806b47
- SHA1 1cf43f470a0c65a7dc1d238a4efdda79576d341b
- SHA512 e19ed91354cbf23c9dc29933ee15c8c30251cb4e1dba729dbd4eb22af2f398fd1f352b0563cdd4459505b62ef449a5d04ec063b54b4091b4d87defb1c3fe6fe7
- SSDEEP 12288:xvgL4Om0Bd2i6+wkMOaCINWVyxBlDetAqxSvZJ:xILpD2rLk9a9NGyb
- TLSH T16AF46C1AE3A502F8D0BBC174CA534592EB7278556330A69F03D15E691F3B6E06F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_324ab4bdc3faa64c8176066bd3806b47_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_324ab4bdc3faa64c8176066bd3806b47_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
neweu1
C2
-
http://160.20.109.75/d19ca32cb5a444ac8b87.php
Attributes
-
url_path
/d19ca32cb5a444ac8b87.php
rc4.traffic_key
rc4.plain
Targets
-
- Target 2026-07-12_324ab4bdc3faa64c8176066bd3806b47_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 765KB
- SHA256 80c8bbeb2ecebf8680dcef93043a5ecdf83d7d071ac5ef83d9ec5eb07b941b99
- MD5 324ab4bdc3faa64c8176066bd3806b47
- SHA1 1cf43f470a0c65a7dc1d238a4efdda79576d341b
- SHA512 e19ed91354cbf23c9dc29933ee15c8c30251cb4e1dba729dbd4eb22af2f398fd1f352b0563cdd4459505b62ef449a5d04ec063b54b4091b4d87defb1c3fe6fe7
- SSDEEP 12288:xvgL4Om0Bd2i6+wkMOaCINWVyxBlDetAqxSvZJ:xILpD2rLk9a9NGyb
- TLSH T16AF46C1AE3A502F8D0BBC174CA534592EB7278556330A69F03D15E691F3B6E06F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10