General
- Target 2026-07-14_991fab1c038d3569e36e92251700935c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 766KB
- Sample260714-g8ar2afy2j
- SHA256 0a47791a9c8ce6777d5d658d116168470f09e6b9564d9bdff44c352c9f524849
- MD5 991fab1c038d3569e36e92251700935c
- SHA1 4f4179e7867187fdc3a97126170d8e6049df3d61
- SHA512 aca1c2364dfb998778b782d08e79066d677613501cefe4ec7677bf40e27a2b429d69da73eb6eef9e477ea387eae8f1412e34be2270170c181fbe5cf3c6ac6ffe
- SSDEEP 12288:XvgL4Om0Bd2i6+wkMOaCISkXyxBlDetAqxSvvJ:XILpD2rLk9a9Suyb
- TLSH T1C6F48D1AF3A502FCD0BBC178CA524552EB72BC565370A69F03D14A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_991fab1c038d3569e36e92251700935c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_991fab1c038d3569e36e92251700935c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
ja1
C2
-
http://160.20.109.75/d19ca32cb5a444ac8b87.php
Attributes
-
url_path
/d19ca32cb5a444ac8b87.php
rc4.traffic_key
rc4.plain
Targets
-
- Target 2026-07-14_991fab1c038d3569e36e92251700935c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 766KB
- SHA256 0a47791a9c8ce6777d5d658d116168470f09e6b9564d9bdff44c352c9f524849
- MD5 991fab1c038d3569e36e92251700935c
- SHA1 4f4179e7867187fdc3a97126170d8e6049df3d61
- SHA512 aca1c2364dfb998778b782d08e79066d677613501cefe4ec7677bf40e27a2b429d69da73eb6eef9e477ea387eae8f1412e34be2270170c181fbe5cf3c6ac6ffe
- SSDEEP 12288:XvgL4Om0Bd2i6+wkMOaCISkXyxBlDetAqxSvvJ:XILpD2rLk9a9Suyb
- TLSH T1C6F48D1AF3A502FCD0BBC178CA524552EB72BC565370A69F03D14A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10