General
- Target 2026-08-03_b634b6f4421471f4176f542eb2b8a8cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry
- Size 6.2MB
- Sample260804-l4z9caxdmc
- SHA256 17caf39a92c67d3e5e2fa9059006bd172e210f3888fa1c443d51d525f12c0113
- MD5 b634b6f4421471f4176f542eb2b8a8cf
- SHA1 b19562349bb7464e7825ac2cc31eb85eefe71b7a
- SHA512 a069c61ba002bc8a9a8c3c47366757c2be673ede2658f8c0161a31045f263184f675680e0679c0e90202dd12c289ebeaab1a504f100f9c2f64110a11c5060c4b
- SSDEEP 49152:wl8wjpJHr354wp50snawKvRrvcXiT4fRVT6nksdyqXpQWThgRo+8Q6xOmL2QaHkB:Ro6wp6NIVboBm2slHXxVnvm
- TLSH T14D56C01AA3A401ECC0B7D5B88A175E23EA72785903769BDB17E085552F27BF06F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-03_b634b6f4421471f4176f542eb2b8a8cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_b634b6f4421471f4176f542eb2b8a8cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_b634b6f4421471f4176f542eb2b8a8cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_wannacry
- Size 6.2MB
- SHA256 17caf39a92c67d3e5e2fa9059006bd172e210f3888fa1c443d51d525f12c0113
- MD5 b634b6f4421471f4176f542eb2b8a8cf
- SHA1 b19562349bb7464e7825ac2cc31eb85eefe71b7a
- SHA512 a069c61ba002bc8a9a8c3c47366757c2be673ede2658f8c0161a31045f263184f675680e0679c0e90202dd12c289ebeaab1a504f100f9c2f64110a11c5060c4b
- SSDEEP 49152:wl8wjpJHr354wp50snawKvRrvcXiT4fRVT6nksdyqXpQWThgRo+8Q6xOmL2QaHkB:Ro6wp6NIVboBm2slHXxVnvm
- TLSH T14D56C01AA3A401ECC0B7D5B88A175E23EA72785903769BDB17E085552F27BF06F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE