General
- Target 2026-07-26_4118b1e71bbd289f86ab2263b437b113_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 1003KB
- Sample260726-2qa1asel7s
- SHA256 82a51d27a0ca912a063b978b8e94f168e12f23ae754faef9e2d19dba6fc3307d
- MD5 4118b1e71bbd289f86ab2263b437b113
- SHA1 346a0ce5b89353722c749bcdccf079324e632ed4
- SHA512 eee1a858301ec9a1acdac6f0e1f19401f3e1d00bf4aa508efae864fe2ec0629944cec5e4623ee7f9a5c4c8eef485e96eae3ddf3707776e25e82fab888053c1fc
- SSDEEP 24576:DaJZZJ4+oa7jRSC/KPeFhu/SvNOuBgPsLivpH5:eBRSNSw
- TLSH T13A25AEDB72585E8AC00B7A7A0245C17EEA42AE401314454ECFD79E57FF2A382DE26D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-26_4118b1e71bbd289f86ab2263b437b113_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_4118b1e71bbd289f86ab2263b437b113_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_4118b1e71bbd289f86ab2263b437b113_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 1003KB
- SHA256 82a51d27a0ca912a063b978b8e94f168e12f23ae754faef9e2d19dba6fc3307d
- MD5 4118b1e71bbd289f86ab2263b437b113
- SHA1 346a0ce5b89353722c749bcdccf079324e632ed4
- SHA512 eee1a858301ec9a1acdac6f0e1f19401f3e1d00bf4aa508efae864fe2ec0629944cec5e4623ee7f9a5c4c8eef485e96eae3ddf3707776e25e82fab888053c1fc
- SSDEEP 24576:DaJZZJ4+oa7jRSC/KPeFhu/SvNOuBgPsLivpH5:eBRSNSw
- TLSH T13A25AEDB72585E8AC00B7A7A0245C17EEA42AE401314454ECFD79E57FF2A382DE26D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.