General
- Target 2026-07-17_85992503cce20bb0839bd7a3b80e3f7c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 835KB
- Sample260717-jpbakaas6s
- SHA256 331eadbcb93e3624c3bb6e3b811c7ec87a252c719d20f0f8250fab6a681f5551
- MD5 85992503cce20bb0839bd7a3b80e3f7c
- SHA1 2a10e7ce180be5540d52149e1812ae9f85e9a844
- SHA512 c13c722fc146695e91e81ae47c9438857fe0adec5d7cb41a6bb1331d750b7ace8796856f70d65668634ff9a211a51e43631c34eac73887bb1f2a8c51b683ab82
- SSDEEP 12288:CvgL4Om0Br2i6+wkMOaCIqwEyxBlDetAqxSvzRJ:CILp52rLk9a9qlyb
- TLSH T1D5057D1AF3A402FCD0BBC178CA524552EB72BC565370969F03E15A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_85992503cce20bb0839bd7a3b80e3f7c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_85992503cce20bb0839bd7a3b80e3f7c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
build1
C2
-
http://144.31.57.94/350be244a2f97a3a4ca8.php
Attributes
-
url_path
/350be244a2f97a3a4ca8.php
rc4.traffic_key
rc4.plain
Targets
-
- Target 2026-07-17_85992503cce20bb0839bd7a3b80e3f7c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 835KB
- SHA256 331eadbcb93e3624c3bb6e3b811c7ec87a252c719d20f0f8250fab6a681f5551
- MD5 85992503cce20bb0839bd7a3b80e3f7c
- SHA1 2a10e7ce180be5540d52149e1812ae9f85e9a844
- SHA512 c13c722fc146695e91e81ae47c9438857fe0adec5d7cb41a6bb1331d750b7ace8796856f70d65668634ff9a211a51e43631c34eac73887bb1f2a8c51b683ab82
- SSDEEP 12288:CvgL4Om0Br2i6+wkMOaCIqwEyxBlDetAqxSvzRJ:CILp52rLk9a9qlyb
- TLSH T1D5057D1AF3A402FCD0BBC178CA524552EB72BC565370969F03E15A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10