General
- Target 2026-08-07_351985ecb39a16b96c6a4c4912fe84f7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 776KB
- Sample260807-ts4fmazbpe
- SHA256 b275c9131f27799b3289cf2fb01216c9aafa18f62a08c08f30520d6113fc8610
- MD5 351985ecb39a16b96c6a4c4912fe84f7
- SHA1 d7ae7ba53eb17a42fb57555ce818ac08268f489d
- SHA512 965546398ddd82bc25dc80fe98fce3b28456df296d1b050701a150d1a6442206788b04351d7b6fb473686c76f5952f1dcd7f14317141685cc5085b844af5af84
- SSDEEP 12288:kngwZs/X8eipbJVfMxBkfCTE+HCTUTkyxBlDetAqxSvoD:kgwaMeipbfCkKTEGmU4yb+
- TLSH T159058D1AF3A502F9D17BC178C9424552EB72B8565330AADF03E14A6A1F376E05F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_351985ecb39a16b96c6a4c4912fe84f7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_351985ecb39a16b96c6a4c4912fe84f7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_351985ecb39a16b96c6a4c4912fe84f7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 776KB
- SHA256 b275c9131f27799b3289cf2fb01216c9aafa18f62a08c08f30520d6113fc8610
- MD5 351985ecb39a16b96c6a4c4912fe84f7
- SHA1 d7ae7ba53eb17a42fb57555ce818ac08268f489d
- SHA512 965546398ddd82bc25dc80fe98fce3b28456df296d1b050701a150d1a6442206788b04351d7b6fb473686c76f5952f1dcd7f14317141685cc5085b844af5af84
- SSDEEP 12288:kngwZs/X8eipbJVfMxBkfCTE+HCTUTkyxBlDetAqxSvoD:kgwaMeipbfCkKTEGmU4yb+
- TLSH T159058D1AF3A502F9D17BC178C9424552EB72B8565330AADF03E14A6A1F376E05F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.