General
- Target 2026-08-05_91d42cf99f051d8a295eb87ada24cf87_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 776KB
- Sample260805-gew36sec59
- SHA256 f8ff370684fc20ee0062dbbe84041ac96f6f4f58c44cc11576187e011d86d3c7
- MD5 91d42cf99f051d8a295eb87ada24cf87
- SHA1 fdf8e301b5e6125931e151d636a95300182dde77
- SHA512 4da1b317ac5447763da0afa1178016780415a9fdb899018b0d104d2b3c0c4ceba574f61f1af12d2635624c8af24d80f67323595ab84aaf98a0e665821d2bb0ad
- SSDEEP 12288:ingwZs/X8eipbJVfMxBkfCTE+HCTkXnyyxBlDetAqxSvCD:igwaMeipbfCkKTEGmKyybY
- TLSH T110F46C9AE3B502A8D07BC174CA528552FB737C5553349BDF03E14A6A1F33EA05B3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_91d42cf99f051d8a295eb87ada24cf87_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_91d42cf99f051d8a295eb87ada24cf87_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 776KB
- SHA256 f8ff370684fc20ee0062dbbe84041ac96f6f4f58c44cc11576187e011d86d3c7
- MD5 91d42cf99f051d8a295eb87ada24cf87
- SHA1 fdf8e301b5e6125931e151d636a95300182dde77
- SHA512 4da1b317ac5447763da0afa1178016780415a9fdb899018b0d104d2b3c0c4ceba574f61f1af12d2635624c8af24d80f67323595ab84aaf98a0e665821d2bb0ad
- SSDEEP 12288:ingwZs/X8eipbJVfMxBkfCTE+HCTkXnyyxBlDetAqxSvCD:igwaMeipbfCkKTEGmKyybY
- TLSH T110F46C9AE3B502A8D07BC174CA528552FB737C5553349BDF03E14A6A1F33EA05B3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.