General
- Target 2026-08-01_5e26063835e559cdcf104c0e052f539f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260801-q17apsz1as
- SHA256 3eaae53bf69fbeb80a692f5f93d98f7bc505989c9d3a6d66519f9d539864dcdb
- MD5 5e26063835e559cdcf104c0e052f539f
- SHA1 3c6d821d1949435e273110aac5c9e25e29ff0053
- SHA512 5f8c4895e3bee316c1738978ee563e1c7d52d6f09a2fdb813093bdd07096a7c8e2136189a239303e39305c62b39b2413c6ee7155a8b5ae92af3c9e51ec814429
- SSDEEP 49152:oynHLkJjuzTqoVyNV3dgM9qPSXnWBuxric/4VKP4bce62OR3FTYX8DTFX40yZMjX:MGMa04XODTFXNy+j16if
- TLSH T16B167C07E7B941E5C0BBD13D8A569657FAB2784A877197CB47A0871A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_5e26063835e559cdcf104c0e052f539f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_5e26063835e559cdcf104c0e052f539f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_5e26063835e559cdcf104c0e052f539f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 3eaae53bf69fbeb80a692f5f93d98f7bc505989c9d3a6d66519f9d539864dcdb
- MD5 5e26063835e559cdcf104c0e052f539f
- SHA1 3c6d821d1949435e273110aac5c9e25e29ff0053
- SHA512 5f8c4895e3bee316c1738978ee563e1c7d52d6f09a2fdb813093bdd07096a7c8e2136189a239303e39305c62b39b2413c6ee7155a8b5ae92af3c9e51ec814429
- SSDEEP 49152:oynHLkJjuzTqoVyNV3dgM9qPSXnWBuxric/4VKP4bce62OR3FTYX8DTFX40yZMjX:MGMa04XODTFXNy+j16if
- TLSH T16B167C07E7B941E5C0BBD13D8A569657FAB2784A877197CB47A0871A0F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory