General
- Target 2026-08-09_c493a008718253d8b40b6532afdd249b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 202KB
- Sample260809-tgd2lahn8z
- SHA256 b34ce8e9804b4620565a30d9cce31bc8110c8b515b9298f23f2e0d157877f742
- MD5 c493a008718253d8b40b6532afdd249b
- SHA1 657aa75e4581dc0dc6690f370deaf1418a2e0a1a
- SHA512 8bfeeaf3b2ea3b3a588869b9bec81e76a08627dbe69ee4e8083fde8e8f486828a2001820801a3ef5645f8530295aa5a364b2578a9a12fb4906f65ff7e463963d
- SSDEEP 3072:JC9HOVLTKeZUTEM20HPZet42280UyZ71MlvbWnz14gsnGnIdW:8Z6LxZ1APZe7D+7qamL
- TLSH T11214AF07B3A634F9E5B79539C9610605EB73783647219BEF0394466A2F232C09D3EF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_c493a008718253d8b40b6532afdd249b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_c493a008718253d8b40b6532afdd249b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c493a008718253d8b40b6532afdd249b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 202KB
- SHA256 b34ce8e9804b4620565a30d9cce31bc8110c8b515b9298f23f2e0d157877f742
- MD5 c493a008718253d8b40b6532afdd249b
- SHA1 657aa75e4581dc0dc6690f370deaf1418a2e0a1a
- SHA512 8bfeeaf3b2ea3b3a588869b9bec81e76a08627dbe69ee4e8083fde8e8f486828a2001820801a3ef5645f8530295aa5a364b2578a9a12fb4906f65ff7e463963d
- SSDEEP 3072:JC9HOVLTKeZUTEM20HPZet42280UyZ71MlvbWnz14gsnGnIdW:8Z6LxZ1APZe7D+7qamL
- TLSH T11214AF07B3A634F9E5B79539C9610605EB73783647219BEF0394466A2F232C09D3EF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing commands for clearing Windows Event Logs
-
Detects executables embedding command execution via IExecuteCommand COM object