General
- Target 2026-08-13_06ecb1923c1dba11909ca8165d5f7fa3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 2.8MB
- Sample260813-mt2j4aac43
- SHA256 fa53f59ddd585fa6d2a1a1ab8e7a343330ad7a6788b41cdbcdb02006df7b3f8e
- MD5 06ecb1923c1dba11909ca8165d5f7fa3
- SHA1 33b2c18587c802e07d877cea3d7edc113f311319
- SHA512 0faab55f5a2afff678531a7db3a40c20330552150bdbdbb28b3b0aec6947aed92bf81918c6efba319437ef4c724566da8021577651c3c45a4c49e90a1e73b89d
- SSDEEP 49152:CltNhCakB0baS4ILJtCh8phcPZT2uFl1RCeysY/MRikomhhpNzQNbAEooxQ8r7ML:YNfaAJEapmPZNl3hUbAAQq7cWJATblh1
- TLSH T177D5C157F2B400FCD167C178C9565A07EBB1B8161774ABDF13908A6A2F23AE11E7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_06ecb1923c1dba11909ca8165d5f7fa3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_06ecb1923c1dba11909ca8165d5f7fa3_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 2.8MB
- SHA256 fa53f59ddd585fa6d2a1a1ab8e7a343330ad7a6788b41cdbcdb02006df7b3f8e
- MD5 06ecb1923c1dba11909ca8165d5f7fa3
- SHA1 33b2c18587c802e07d877cea3d7edc113f311319
- SHA512 0faab55f5a2afff678531a7db3a40c20330552150bdbdbb28b3b0aec6947aed92bf81918c6efba319437ef4c724566da8021577651c3c45a4c49e90a1e73b89d
- SSDEEP 49152:CltNhCakB0baS4ILJtCh8phcPZT2uFl1RCeysY/MRikomhhpNzQNbAEooxQ8r7ML:YNfaAJEapmPZNl3hUbAAQq7cWJATblh1
- TLSH T177D5C157F2B400FCD167C178C9565A07EBB1B8161774ABDF13908A6A2F23AE11E7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE