General
- Target 2026-08-11_51c71ad74e415f0fbba341788261b01a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 15.4MB
- Sample260811-htm99adb29
- SHA256 af453dbfdf22ceb86cf1b62561dc57927fdcb21b9673a9b580bda8fbf16c2bb9
- MD5 51c71ad74e415f0fbba341788261b01a
- SHA1 a8a5c9664b3f1874233c4da354849508707d439a
- SHA512 873bc8eaf20a57c1eb1c88c59fe906bf95fcdbc029cd6ec7600367d8806e17ad4e5810190056791951c7fc363fe66d08447c45218c3d6317237dc4e108f2fbe4
- SSDEEP 196608:RelZiBc37CQpyXYf9y75CS3vg8L8IZT+8sIM1Ofe6lageFKiudkttjI+FHeCnbwT:0THZVO5D3vpLzNsuG6NeFKiUktNZFMm
- TLSH T116F613666BC521B8F0A3B239B5870247E381FD9941AE8F4E27C17C037B71DBA690E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_51c71ad74e415f0fbba341788261b01a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
tr1pernn
C2
-
http://178.16.54.175
Attributes
-
url_path
/e9762ff07e084dbb.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-08-11_51c71ad74e415f0fbba341788261b01a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 15.4MB
- SHA256 af453dbfdf22ceb86cf1b62561dc57927fdcb21b9673a9b580bda8fbf16c2bb9
- MD5 51c71ad74e415f0fbba341788261b01a
- SHA1 a8a5c9664b3f1874233c4da354849508707d439a
- SHA512 873bc8eaf20a57c1eb1c88c59fe906bf95fcdbc029cd6ec7600367d8806e17ad4e5810190056791951c7fc363fe66d08447c45218c3d6317237dc4e108f2fbe4
- SSDEEP 196608:RelZiBc37CQpyXYf9y75CS3vg8L8IZT+8sIM1Ofe6lageFKiudkttjI+FHeCnbwT:0THZVO5D3vpLzNsuG6NeFKiUktNZFMm
- TLSH T116F613666BC521B8F0A3B239B5870247E381FD9941AE8F4E27C17C037B71DBA690E751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 2