General
- Target 2026-07-27_3644ec9cb53f3f3f22d9d4e134833b17_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 365KB
- Sample260727-vmm25axdpc
- SHA256 fe27c15f7855522ebaa5b1ea52d5e6b056713a0a870a1069ed032d54a2d2675b
- MD5 3644ec9cb53f3f3f22d9d4e134833b17
- SHA1 b20b882fa879e3f1969328696610a1f0293837b0
- SHA512 27d58e982bf03732ba22c090ae4196280bd8f8fb4ab24368f26a31e1f292848db1d4ff81362240ce4a746449acec76080ecdd27f8594fd17055692c585952b2c
- SSDEEP 3072:zg+R3S67Gie2MNwZBO8wMf0qMcOcrfMskmi6H6B6x83cpD1b3lSfRU1qm8eawmJT:COtkmi6H6B6x83YDLyneaABq3miAi4Q
- TLSH T1A7845C4AFBA514F5E5BBC138C952651AFD717CA24370A78F63904A572F23BA0AE3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_3644ec9cb53f3f3f22d9d4e134833b17_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_3644ec9cb53f3f3f22d9d4e134833b17_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_3644ec9cb53f3f3f22d9d4e134833b17_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 365KB
- SHA256 fe27c15f7855522ebaa5b1ea52d5e6b056713a0a870a1069ed032d54a2d2675b
- MD5 3644ec9cb53f3f3f22d9d4e134833b17
- SHA1 b20b882fa879e3f1969328696610a1f0293837b0
- SHA512 27d58e982bf03732ba22c090ae4196280bd8f8fb4ab24368f26a31e1f292848db1d4ff81362240ce4a746449acec76080ecdd27f8594fd17055692c585952b2c
- SSDEEP 3072:zg+R3S67Gie2MNwZBO8wMf0qMcOcrfMskmi6H6B6x83cpD1b3lSfRU1qm8eawmJT:COtkmi6H6B6x83YDLyneaABq3miAi4Q
- TLSH T1A7845C4AFBA514F5E5BBC138C952651AFD717CA24370A78F63904A572F23BA0AE3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Creates new service(s)