General
- Target 2026-07-27_0fd29590bb1f248a0f05ad9a962e1663_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- Sample260727-kpcn3ay1fx
- SHA256 a0ce33db6e6e01f6d84dec81df09e7df999ede4da73e8931d34eeb9057d246cd
- MD5 0fd29590bb1f248a0f05ad9a962e1663
- SHA1 00982af9d10b5d158f025ebf4641cda1041afaa0
- SHA512 29d00663166aa2e0760aff0fb85c3386b70f93b3fb18a16d11f2474fab00e171636bd1ff848b38338d972ddc6d1cc4b862aab863ab9553511cc345682e4488ca
- SSDEEP 6144:/izyD1Q8XX/WXsR6+DyPUT6aW7kVWpYlXDsBRHJeqs/:/fQ8XXT6+WPUT6aWxClzwHJen/
- TLSH T16584AE52F7A510FAE16BC238CA424516FA72BC564760A2CF33A46E963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-27_0fd29590bb1f248a0f05ad9a962e1663_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_0fd29590bb1f248a0f05ad9a962e1663_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_0fd29590bb1f248a0f05ad9a962e1663_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- SHA256 a0ce33db6e6e01f6d84dec81df09e7df999ede4da73e8931d34eeb9057d246cd
- MD5 0fd29590bb1f248a0f05ad9a962e1663
- SHA1 00982af9d10b5d158f025ebf4641cda1041afaa0
- SHA512 29d00663166aa2e0760aff0fb85c3386b70f93b3fb18a16d11f2474fab00e171636bd1ff848b38338d972ddc6d1cc4b862aab863ab9553511cc345682e4488ca
- SSDEEP 6144:/izyD1Q8XX/WXsR6+DyPUT6aW7kVWpYlXDsBRHJeqs/:/fQ8XXT6+WPUT6aWxClzwHJen/
- TLSH T16584AE52F7A510FAE16BC238CA424516FA72BC564760A2CF33A46E963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.