General
- Target 2026-07-30_2bcb729e9b4aa8b663b2eb91065de020_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- Sample260730-2kwptaydra
- SHA256 d06a9ce3aca0107c4d66b0c6ab9398b9747f2720609ceae0d30f6ac610eb31a8
- MD5 2bcb729e9b4aa8b663b2eb91065de020
- SHA1 25bec2fad0265b0c820ea7643e064d39ce96f71e
- SHA512 302f5d934dfd9745324c2b8201fe3a464913f004dbb6e46a43df99c0dc7ae1061b59e87b743f7e3e91978c2bacfb9f9e83817550d694dd82e66721468ab9a872
- SSDEEP 6144:dzCV1Q8XX/WXsR6+DyPUT6aW7zVWpYFXDsBRHJeqt:oQ8XXT6+WPUT6aWUCFzwHJey
- TLSH T16C84AE52F7A514FAE16BC2388A424516FA72BC164760A2CF33A46E963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-30_2bcb729e9b4aa8b663b2eb91065de020_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_2bcb729e9b4aa8b663b2eb91065de020_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_2bcb729e9b4aa8b663b2eb91065de020_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- SHA256 d06a9ce3aca0107c4d66b0c6ab9398b9747f2720609ceae0d30f6ac610eb31a8
- MD5 2bcb729e9b4aa8b663b2eb91065de020
- SHA1 25bec2fad0265b0c820ea7643e064d39ce96f71e
- SHA512 302f5d934dfd9745324c2b8201fe3a464913f004dbb6e46a43df99c0dc7ae1061b59e87b743f7e3e91978c2bacfb9f9e83817550d694dd82e66721468ab9a872
- SSDEEP 6144:dzCV1Q8XX/WXsR6+DyPUT6aW7zVWpYFXDsBRHJeqt:oQ8XXT6+WPUT6aWUCFzwHJey
- TLSH T16C84AE52F7A514FAE16BC2388A424516FA72BC164760A2CF33A46E963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Drops desktop.ini file(s)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.