General
- Target 2026-08-07_b0307bbe1994e0325e282fc9b1599154_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 205KB
- Sample260808-a53v3swgnh
- SHA256 7eb44cba2e7ca558b047bf87c9b67a4a8dd90755391414ba99eef1124912cebd
- MD5 b0307bbe1994e0325e282fc9b1599154
- SHA1 d28ed3d082ae52d2fbd8cb41721b396892415bfb
- SHA512 d2eace266763a66909e04ddb523abe23d25eaf1ff5a28c43b7a40390c728b20a3dfa5e3c7ead37ce5d2117aa81cd385c6e61f0c984f2065eeb85bb3db846464b
- SSDEEP 3072:RD9IbocFL7UkyM2jwf0w++DkBpfDRaqpbNBQ0urS+mspAjft:BIom7EQ0wKRDRaqpQ0G/AR
- TLSH T12024AE4BB3F630E9E1B7863888655645EB73783607609BEF039443692F236D09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_b0307bbe1994e0325e282fc9b1599154_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_b0307bbe1994e0325e282fc9b1599154_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_b0307bbe1994e0325e282fc9b1599154_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 205KB
- SHA256 7eb44cba2e7ca558b047bf87c9b67a4a8dd90755391414ba99eef1124912cebd
- MD5 b0307bbe1994e0325e282fc9b1599154
- SHA1 d28ed3d082ae52d2fbd8cb41721b396892415bfb
- SHA512 d2eace266763a66909e04ddb523abe23d25eaf1ff5a28c43b7a40390c728b20a3dfa5e3c7ead37ce5d2117aa81cd385c6e61f0c984f2065eeb85bb3db846464b
- SSDEEP 3072:RD9IbocFL7UkyM2jwf0w++DkBpfDRaqpbNBQ0urS+mspAjft:BIom7EQ0wKRDRaqpQ0G/AR
- TLSH T12024AE4BB3F630E9E1B7863888655645EB73783607609BEF039443692F236D09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing commands for clearing Windows Event Logs
-
Detects executables embedding command execution via IExecuteCommand COM object