General
- Target 2026-08-04_dbcbccbd0201abcf7572c5c49d34c537_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 365KB
- Sample260804-fxbdragl3v
- SHA256 8c9f001753929590128ab112232a85bdc4c1d74bbc621eced194f14268788b4d
- MD5 dbcbccbd0201abcf7572c5c49d34c537
- SHA1 474e09157262994297a18353e1c9b7ab034b1c82
- SHA512 1a319e2d63d5c81ea1f84df75ea0d582716930dd3adf200b34914648188a4e403411460df3b42da9e57f4017fffe0483732f8e597382d0379f9c814724a6c518
- SSDEEP 3072:lgGJ3v67Gie2MN/ZMu8XsfPqgFu9f8yssmJkC2863kachDFzy1i6QR1qz0O0Gawn:4cDsmJkC2863kaQD6dzIGaz3Ii336
- TLSH T1A4845C4AEBA510F5E5BBC178C952561BFD717CA24370A78F63904A972F23BA0AD3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_dbcbccbd0201abcf7572c5c49d34c537_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_dbcbccbd0201abcf7572c5c49d34c537_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_dbcbccbd0201abcf7572c5c49d34c537_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 365KB
- SHA256 8c9f001753929590128ab112232a85bdc4c1d74bbc621eced194f14268788b4d
- MD5 dbcbccbd0201abcf7572c5c49d34c537
- SHA1 474e09157262994297a18353e1c9b7ab034b1c82
- SHA512 1a319e2d63d5c81ea1f84df75ea0d582716930dd3adf200b34914648188a4e403411460df3b42da9e57f4017fffe0483732f8e597382d0379f9c814724a6c518
- SSDEEP 3072:lgGJ3v67Gie2MN/ZMu8XsfPqgFu9f8yssmJkC2863kachDFzy1i6QR1qz0O0Gawn:4cDsmJkC2863kaQD6dzIGaz3Ii336
- TLSH T1A4845C4AEBA510F5E5BBC178C952561BFD717CA24370A78F63904A972F23BA0AD3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Downloads MZ/PE file
-
Creates new service(s)
-
Executes dropped EXE