General
- Target 2026-08-06_451e1172f2906c2c565a4568b2e5d0ab_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- Sample260806-hrf36awaja
- SHA256 0ed7bc02c149e48262c488765db8d95036d30bf911eb43ec6f75bb415fa51023
- MD5 451e1172f2906c2c565a4568b2e5d0ab
- SHA1 bfd36391b8585db174a5f36376820421d47ac610
- SHA512 a1bb44cb3f91656b9e7294a5ec8f5a9c4326c28392f2d0dc8381af97200fb78501c9dfa8e572cf0a5bd27f5d477b02ab322adbbe37ee8644e2e7ea4321466e16
- SSDEEP 6144:Mz4/1Q8XX/WXsR6+DyPUT6aW7hZWpYFXDsBRHJeqN:PQ8XXT6+WPUT6aWWCFzwHJem
- TLSH T19284AE52F7E510FAE16BC23889424516FA72BC564760A2CF33A46E963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-06_451e1172f2906c2c565a4568b2e5d0ab_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_451e1172f2906c2c565a4568b2e5d0ab_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_451e1172f2906c2c565a4568b2e5d0ab_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- SHA256 0ed7bc02c149e48262c488765db8d95036d30bf911eb43ec6f75bb415fa51023
- MD5 451e1172f2906c2c565a4568b2e5d0ab
- SHA1 bfd36391b8585db174a5f36376820421d47ac610
- SHA512 a1bb44cb3f91656b9e7294a5ec8f5a9c4326c28392f2d0dc8381af97200fb78501c9dfa8e572cf0a5bd27f5d477b02ab322adbbe37ee8644e2e7ea4321466e16
- SSDEEP 6144:Mz4/1Q8XX/WXsR6+DyPUT6aW7hZWpYFXDsBRHJeqN:PQ8XXT6+WPUT6aWWCFzwHJem
- TLSH T19284AE52F7E510FAE16BC23889424516FA72BC564760A2CF33A46E963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Drops desktop.ini file(s)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.