General
- Target 2026-08-04_012621901fc6fc089baf22502959a11c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 262KB
- Sample260804-klrc2s1wfz
- SHA256 8e0bf040f368e075a9dd39b302260919ee71e4ac93f025a381ac85b06df81b38
- MD5 012621901fc6fc089baf22502959a11c
- SHA1 d25c21d885da197b2746e89b87e8fe48eebbd3d7
- SHA512 a4955b8dc26260021e36ed54b93f33626b7c8e54dbcd561f2db182ecb059c052fe7b837523685928075c023cc652ed39aafd3aafde5b08a32469d3eae7934b23
- SSDEEP 3072:uCEKcjVFZLzlBQ14XyGE2uxqtEVmItM3m9iRb9j/QaBabWs9o0qk6+IHlHIjNuki:uCcbe4iGEBYKkI6YvuHIw
- TLSH T157447D15B7A40CFAED67817DCD538946EA727C4647A0E7CF03A04A961F276E08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_012621901fc6fc089baf22502959a11c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_012621901fc6fc089baf22502959a11c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_012621901fc6fc089baf22502959a11c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 262KB
- SHA256 8e0bf040f368e075a9dd39b302260919ee71e4ac93f025a381ac85b06df81b38
- MD5 012621901fc6fc089baf22502959a11c
- SHA1 d25c21d885da197b2746e89b87e8fe48eebbd3d7
- SHA512 a4955b8dc26260021e36ed54b93f33626b7c8e54dbcd561f2db182ecb059c052fe7b837523685928075c023cc652ed39aafd3aafde5b08a32469d3eae7934b23
- SSDEEP 3072:uCEKcjVFZLzlBQ14XyGE2uxqtEVmItM3m9iRb9j/QaBabWs9o0qk6+IHlHIjNuki:uCcbe4iGEBYKkI6YvuHIw
- TLSH T157447D15B7A40CFAED67817DCD538946EA727C4647A0E7CF03A04A961F276E08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.