General
- Target 2026-07-23_75cdfccc6edd49e2d9fdcd35b32b1647_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 861KB
- Sample260723-m3c8vswejh
- SHA256 53ac31b61dc1a236e9d1823da26b309adca8262861743b7894b04d8b0ddcdb9b
- MD5 75cdfccc6edd49e2d9fdcd35b32b1647
- SHA1 5e290579ebb6212f270d5199017182283b36099e
- SHA512 b2816deb4c4fcf6a078d1f76b63486d54e48147474362f2690b1439bbc920f7fdbfebec05296af886425321e3d7395c960aece3ce57ca4b8cca06e9782b5072a
- SSDEEP 12288:Rg9ANYPuw2vX753/llDB/CjE+HSDpqyxBlDetAqxSv9Kj:RMAqv2vX7RXBqjEGGpqybe
- TLSH T18A157C1AF3A502F8D17BC178C9424552EB72B8565330AADF03E15A6A1F376E05F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_75cdfccc6edd49e2d9fdcd35b32b1647_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_75cdfccc6edd49e2d9fdcd35b32b1647_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 861KB
- SHA256 53ac31b61dc1a236e9d1823da26b309adca8262861743b7894b04d8b0ddcdb9b
- MD5 75cdfccc6edd49e2d9fdcd35b32b1647
- SHA1 5e290579ebb6212f270d5199017182283b36099e
- SHA512 b2816deb4c4fcf6a078d1f76b63486d54e48147474362f2690b1439bbc920f7fdbfebec05296af886425321e3d7395c960aece3ce57ca4b8cca06e9782b5072a
- SSDEEP 12288:Rg9ANYPuw2vX753/llDB/CjE+HSDpqyxBlDetAqxSv9Kj:RMAqv2vX7RXBqjEGGpqybe
- TLSH T18A157C1AF3A502F8D17BC178C9424552EB72B8565330AADF03E15A6A1F376E05F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.