General
- Target 2026-08-07_b3c6f9cc8916aecf193504079653d5e7_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 201KB
- Sample260808-a5daeseq2w
- SHA256 ef86158b4cb42e85c07d3e6923b1aed64945f39682364848547e21beead5594b
- MD5 b3c6f9cc8916aecf193504079653d5e7
- SHA1 21b0f3bc6431d6278c74789453c762a50403251c
- SHA512 444834a96eca5012cbad8ac32e9d41b452377da1e5efc37d66cc47a7fecd2aa063800c01273f4568075cdd3cfa8b8ce24522f39d4272df1199e459b0a1b4881b
- SSDEEP 3072:Z+hAmf2KUjFtGHcHZIWPjtfE/GtB+q4YQOxdsKb/HhUNU7kmfrbWrmIj2:kADKjHAZIaoGGqiOLsEBIUYUHWy
- TLSH T13B149D5BB6A630FDE077963989210A45F7B2783257219BEF439443662F232D18D3EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_b3c6f9cc8916aecf193504079653d5e7_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_b3c6f9cc8916aecf193504079653d5e7_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_b3c6f9cc8916aecf193504079653d5e7_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 201KB
- SHA256 ef86158b4cb42e85c07d3e6923b1aed64945f39682364848547e21beead5594b
- MD5 b3c6f9cc8916aecf193504079653d5e7
- SHA1 21b0f3bc6431d6278c74789453c762a50403251c
- SHA512 444834a96eca5012cbad8ac32e9d41b452377da1e5efc37d66cc47a7fecd2aa063800c01273f4568075cdd3cfa8b8ce24522f39d4272df1199e459b0a1b4881b
- SSDEEP 3072:Z+hAmf2KUjFtGHcHZIWPjtfE/GtB+q4YQOxdsKb/HhUNU7kmfrbWrmIj2:kADKjHAZIaoGGqiOLsEBIUYUHWy
- TLSH T13B149D5BB6A630FDE077963989210A45F7B2783257219BEF439443662F232D18D3EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing commands for clearing Windows Event Logs
-
Detects executables embedding command execution via IExecuteCommand COM object