General
- Target 2026-08-05_b2d530ed42ca83d150323c3187d74b95_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 7.3MB
- Sample260805-b9cp5attcs
- SHA256 efc3434e2914a5bdf475b1321754253b650ab06ab4562065e34d541248e1fb1a
- MD5 b2d530ed42ca83d150323c3187d74b95
- SHA1 bdf12f60a13a83d21d3aa737e81c7ad3575300b2
- SHA512 aac524b9f30cd282da96ae015bf071fec6584e491b7dc30c98a130c116d4a8b4dd0d9d8e86b47b0014454c5772d384fd963641e57150dd746badf54e54f135a1
- SSDEEP 49152:lHpjX2pd4cWikfk17Qq4aa4MqDTjM5YDXg7oPyFTUyxYX9j3lcRpn5PheiRXbqt8:X2pd7Q5Yzgv4yyVlgI+UEY4TF
- TLSH T14D76B01663ED01ACF0B7C675CA265913E971BC9A2B31E6DF0590645E2F73BE08E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-05_b2d530ed42ca83d150323c3187d74b95_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_b2d530ed42ca83d150323c3187d74b95_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_b2d530ed42ca83d150323c3187d74b95_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 7.3MB
- SHA256 efc3434e2914a5bdf475b1321754253b650ab06ab4562065e34d541248e1fb1a
- MD5 b2d530ed42ca83d150323c3187d74b95
- SHA1 bdf12f60a13a83d21d3aa737e81c7ad3575300b2
- SHA512 aac524b9f30cd282da96ae015bf071fec6584e491b7dc30c98a130c116d4a8b4dd0d9d8e86b47b0014454c5772d384fd963641e57150dd746badf54e54f135a1
- SSDEEP 49152:lHpjX2pd4cWikfk17Qq4aa4MqDTjM5YDXg7oPyFTUyxYX9j3lcRpn5PheiRXbqt8:X2pd7Q5Yzgv4yyVlgI+UEY4TF
- TLSH T14D76B01663ED01ACF0B7C675CA265913E971BC9A2B31E6DF0590645E2F73BE08E39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables manipulated with Fody
-
Executes dropped EXE