General
- Target 2026-07-16_2ee35c9a4d799b7de6bf4d9c20660550_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 766KB
- Sample260716-1d2rtaew2q
- SHA256 12d314eabd2ed866e5d9c1949e4e676c7372557c1f7531e3c23cb39b85d829dc
- MD5 2ee35c9a4d799b7de6bf4d9c20660550
- SHA1 efe486930f0ee19fc43e4ab5781a112b2d00a931
- SHA512 146ad63ae16e4833e4a03c98d169d4504a8243fe82b8461d2935c92940714b63e9941b54861b289e1ccf478d6722eeaf9eb6a33269e508d13378ba6bd187ec1c
- SSDEEP 12288:cPgLoOm0BuwC6ewkMOayYK1XyxBlDetAqxSvvJ/:coLZgwLrk9adKtyb
- TLSH T1C7F47D1AF3A502FCD0BBC178CA524552EB72BC565330A69F03D15A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-16_2ee35c9a4d799b7de6bf4d9c20660550_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_2ee35c9a4d799b7de6bf4d9c20660550_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
AsgardProtectorBot
C2
-
http://64.224.17.118/b98b577ad87f42dbbf91.php
Attributes
-
url_path
/b98b577ad87f42dbbf91.php
rc4.traffic_key
rc4.plain
Targets
-
- Target 2026-07-16_2ee35c9a4d799b7de6bf4d9c20660550_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 766KB
- SHA256 12d314eabd2ed866e5d9c1949e4e676c7372557c1f7531e3c23cb39b85d829dc
- MD5 2ee35c9a4d799b7de6bf4d9c20660550
- SHA1 efe486930f0ee19fc43e4ab5781a112b2d00a931
- SHA512 146ad63ae16e4833e4a03c98d169d4504a8243fe82b8461d2935c92940714b63e9941b54861b289e1ccf478d6722eeaf9eb6a33269e508d13378ba6bd187ec1c
- SSDEEP 12288:cPgLoOm0BuwC6ewkMOayYK1XyxBlDetAqxSvvJ/:coLZgwLrk9adKtyb
- TLSH T1C7F47D1AF3A502FCD0BBC178CA524552EB72BC565330A69F03D15A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10