82a51d27a0ca912a063b978b8e94f168e12f23ae754faef9e2d19dba6fc3307d

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/07/2026, 22:46

Target
2026-07-26_4118b1e71bbd289f86ab2263b437b113_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 1003KB
Sample260726-2qa1asel7s
SHA256 82a51d27a0ca912a063b978b8e94f168e12f23ae754faef9e2d19dba6fc3307d
MD5 4118b1e71bbd289f86ab2263b437b113
SHA1 346a0ce5b89353722c749bcdccf079324e632ed4
SHA512 eee1a858301ec9a1acdac6f0e1f19401f3e1d00bf4aa508efae864fe2ec0629944cec5e4623ee7f9a5c4c8eef485e96eae3ddf3707776e25e82fab888053c1fc
SSDEEP 24576:DaJZZJ4+oa7jRSC/KPeFhu/SvNOuBgPsLivpH5:eBRSNSw
TLSH
T13A25AEDB72585E8AC00B7A7A0245C17EEA42AE401314454ECFD79E57FF2A382DE26D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

flow	ioc
1	pastebin.com

C:\Users\Admin\AppData\Local\Temp\2026-07-26_4118b1e71bbd289f86ab2263b437b113_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-26_4118b1e71bbd289f86ab2263b437b113_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
PID:2672

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact