General
- Target 2026-08-01_18709b04744cc0b043343c705e04e77b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 262KB
- Sample260801-ldf3saxvay
- SHA256 ac1bcf3f177ce256d619a17b7096d64511dd21bf47bd4e2022996a598dc3f548
- MD5 18709b04744cc0b043343c705e04e77b
- SHA1 85d625108d728f6d6ef22b99afc19a3f3a6a4a5c
- SHA512 8e3f87b5ee9a52fbab997bf1a8591a489008dd194c811a230d97821bfbe7f5893e89d90c4798d29342b3e688ad33ae0f2490451683144a89950c96ee6b4e746c
- SSDEEP 3072:ujP7EXudSWGWtyo3cdwiHstF4Gx/Ee6dRRRZzZunNabWsc00vdwQH127Q:uvAWx8osdXM7vxGuB/2
- TLSH T1E8446C19B7A40CFAED67857DCD538906EA727C564760E7CF03A04A961F236E08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_18709b04744cc0b043343c705e04e77b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_18709b04744cc0b043343c705e04e77b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_18709b04744cc0b043343c705e04e77b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 262KB
- SHA256 ac1bcf3f177ce256d619a17b7096d64511dd21bf47bd4e2022996a598dc3f548
- MD5 18709b04744cc0b043343c705e04e77b
- SHA1 85d625108d728f6d6ef22b99afc19a3f3a6a4a5c
- SHA512 8e3f87b5ee9a52fbab997bf1a8591a489008dd194c811a230d97821bfbe7f5893e89d90c4798d29342b3e688ad33ae0f2490451683144a89950c96ee6b4e746c
- SSDEEP 3072:ujP7EXudSWGWtyo3cdwiHstF4Gx/Ee6dRRRZzZunNabWsc00vdwQH127Q:uvAWx8osdXM7vxGuB/2
- TLSH T1E8446C19B7A40CFAED67857DCD538906EA727C564760E7CF03A04A961F236E08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.