4e81c84577236cc86dbd0efabb2048d0d1c4bcb4c4e9bf81457975210a4229df

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 04:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Size 1.0MB
Sample260714-e8gt8set8q
SHA256 4e81c84577236cc86dbd0efabb2048d0d1c4bcb4c4e9bf81457975210a4229df
MD5 097d6cd54573424b2908997174880fb9
SHA1 cfdf6758abf254788a5aa61d0c1fdf0033660d9b
SHA512 b4d53c8a6ea13a9f939231dcc5e11359bec56b0866bcd7192645253adfff610f7b7e114a7ae6866e75f328fcbbbb7cddc5b21331a438b86d1a9c240c82b5f61f
SSDEEP 12288:W3uPKH6DrvVSQ6CAKSlgR1ytte+a/jMfa7UnOo/JiRU7YYmhWcAt4NibGNlhPW1F:W3uiHm8ywsMcrU7YBWcAt4IKW3j
TLSH
T1FC359F4FEE8231EDC24AC8B49356C9D35521358A0725AAFB4FE412B12A76BE05F3DF14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\lkptfuwqf	2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\lkptfuwqf\ = "URL:lkptfuwqf Protocol"	2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\lkptfuwqf\URL Protocol	2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\lkptfuwqf\shell	2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\lkptfuwqf\shell\open	2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\lkptfuwqf\shell\open\command	2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\lkptfuwqf\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe\" \"%1\""	2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-14_097d6cd54573424b2908997174880fb9_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe"
1⤵
- Modifies registry class
PID:1800

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads