General
- Target 2026-07-20_81f05f7054ee1d179d32df2f537bf89c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 365KB
- Sample260720-lf4xmafy2t
- SHA256 f70d39d1aeb846a9e85f0c63958842f79eb8bde10d335d3521b4332e6cb47aaf
- MD5 81f05f7054ee1d179d32df2f537bf89c
- SHA1 daf4db9717ff7611236b12f7e85bf30069667075
- SHA512 c342953369aeb105059901f46989f290e6f240cc20b33266acd97585046a6ef3dc0b9d49f7761d7a9c8e7b47aaac9ccff568e7493c6fcb3420d42500209886b8
- SSDEEP 3072:ygGJ3i67Gie2MN50tG8+Bfkqanf8VfqsWmXfIql66HsPc5RFzZ1CObJ1qxh/aAkv:/XrWmXfIql66H0oRRu//aC63IiDu/Xl
- TLSH T125845B4AFBA510F5E5BBC538C552561AFD717CA24370A78F63904A972F23BA0AE3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_81f05f7054ee1d179d32df2f537bf89c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_81f05f7054ee1d179d32df2f537bf89c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_81f05f7054ee1d179d32df2f537bf89c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 365KB
- SHA256 f70d39d1aeb846a9e85f0c63958842f79eb8bde10d335d3521b4332e6cb47aaf
- MD5 81f05f7054ee1d179d32df2f537bf89c
- SHA1 daf4db9717ff7611236b12f7e85bf30069667075
- SHA512 c342953369aeb105059901f46989f290e6f240cc20b33266acd97585046a6ef3dc0b9d49f7761d7a9c8e7b47aaac9ccff568e7493c6fcb3420d42500209886b8
- SSDEEP 3072:ygGJ3i67Gie2MN50tG8+Bfkqanf8VfqsWmXfIql66HsPc5RFzZ1CObJ1qxh/aAkv:/XrWmXfIql66H0oRRu//aC63IiDu/Xl
- TLSH T125845B4AFBA510F5E5BBC538C552561AFD717CA24370A78F63904A972F23BA0AE3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Suspicious use of NtCreateUserProcessOtherParentProcess
Downloads MZ/PE file
Creates new service(s)
Executes dropped EXE
Loads dropped DLL