General
- Target 2026-08-09_5d9237766469c78bf7f430541186c084_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.1MB
- Sample260809-rpbkbsgl4y
- SHA256 6ae7e2277714c8765864a0621b60b8de188625431f1b2ab7b64f2de1b4246461
- MD5 5d9237766469c78bf7f430541186c084
- SHA1 885497ea9f21d2e0ad12b361f84568699c97f6f1
- SHA512 90fb5b1bcbea41ed34107984c1e9e216b04f763732ade6b9cec100e64dea4c26cfffb5b4d246eb3e8f016c333ccec409cba455e6b97b548159cf67face5d0915
- SSDEEP 49152:QZzJszTUNnRS/0WmAuPFVp7B5c5anFnWIUpxXXcTXY4kLJD9TNoyAoLo2/BsQDpT:IPWIOpWa3o6KI7RKIJnqm
- TLSH T126167C17E6B940E9C0BBD1388A969517FAB2784A877197CB0791475B1F23BF09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_5d9237766469c78bf7f430541186c084_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_5d9237766469c78bf7f430541186c084_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_5d9237766469c78bf7f430541186c084_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.1MB
- SHA256 6ae7e2277714c8765864a0621b60b8de188625431f1b2ab7b64f2de1b4246461
- MD5 5d9237766469c78bf7f430541186c084
- SHA1 885497ea9f21d2e0ad12b361f84568699c97f6f1
- SHA512 90fb5b1bcbea41ed34107984c1e9e216b04f763732ade6b9cec100e64dea4c26cfffb5b4d246eb3e8f016c333ccec409cba455e6b97b548159cf67face5d0915
- SSDEEP 49152:QZzJszTUNnRS/0WmAuPFVp7B5c5anFnWIUpxXXcTXY4kLJD9TNoyAoLo2/BsQDpT:IPWIOpWa3o6KI7RKIJnqm
- TLSH T126167C17E6B940E9C0BBD1388A969517FAB2784A877197CB0791475B1F23BF09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory