General
- Target 2026-07-31_827e8b448b25e029fd13b9d148928bdf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 766KB
- Sample260731-rhlrqabf74
- SHA256 db5277931867211cf7bcc1e55e701e0b850bcbd76682543aa1a69ab19d29460a
- MD5 827e8b448b25e029fd13b9d148928bdf
- SHA1 489c68344ec70c7a3d8d9418c13aee1fae2c47c0
- SHA512 691a9becbb9599beb8d5e4e07ab4c7efa6cf42fa274ca25082f6273ae3caf5f7363dfd6ed74c7bcdb1fec442e31327b07416420f1301a8a870537973585559c6
- SSDEEP 12288:XvgL4Om0Bd2i6+wkMOaCIVkXyxBlDetAqxSvvJ:XILpD2rLk9a9Vuyb
- TLSH T18DF48D1AF3A502FCD0BBC178CA524552EB72BC565370A69F03D14A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_827e8b448b25e029fd13b9d148928bdf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_827e8b448b25e029fd13b9d148928bdf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
james1
C2
-
http://160.20.109.75/d19ca32cb5a444ac8b87.php
Attributes
-
url_path
/d19ca32cb5a444ac8b87.php
rc4.traffic_key
rc4.plain
Targets
-
- Target 2026-07-31_827e8b448b25e029fd13b9d148928bdf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 766KB
- SHA256 db5277931867211cf7bcc1e55e701e0b850bcbd76682543aa1a69ab19d29460a
- MD5 827e8b448b25e029fd13b9d148928bdf
- SHA1 489c68344ec70c7a3d8d9418c13aee1fae2c47c0
- SHA512 691a9becbb9599beb8d5e4e07ab4c7efa6cf42fa274ca25082f6273ae3caf5f7363dfd6ed74c7bcdb1fec442e31327b07416420f1301a8a870537973585559c6
- SSDEEP 12288:XvgL4Om0Bd2i6+wkMOaCIVkXyxBlDetAqxSvvJ:XILpD2rLk9a9Vuyb
- TLSH T18DF48D1AF3A502FCD0BBC178CA524552EB72BC565370A69F03D14A6A1F376A06F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10