General
- Target 2026-08-16_2de2a1c5f00fa87ab7d5a04444ea3d3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.2MB
- Sample260816-3qlbpszvay
- SHA256 3a8bcbf4650676d05fb32dec8a799d66cd9abdadbc23db7796336efa1120d56a
- MD5 2de2a1c5f00fa87ab7d5a04444ea3d3b
- SHA1 b68d10047c6470a22b38c1e9ec8b3dbba41b4d52
- SHA512 e999869c35369fd6f4f591e61f3529c9f768e6694597a3549e170059f6f030f5295e7e54d4eb9e9ba00c71c5b4427397a4449cf4107b71afb0926b98966f8bf5
- SSDEEP 98304:ZQiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:ZzFytO1s/ihSxJAyJh3E5uBO
- TLSH T12856CE276D555453E41DC4BAE392562153B0EF3F2581CAE72040BBB178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-16_2de2a1c5f00fa87ab7d5a04444ea3d3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_2de2a1c5f00fa87ab7d5a04444ea3d3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_2de2a1c5f00fa87ab7d5a04444ea3d3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.2MB
- SHA256 3a8bcbf4650676d05fb32dec8a799d66cd9abdadbc23db7796336efa1120d56a
- MD5 2de2a1c5f00fa87ab7d5a04444ea3d3b
- SHA1 b68d10047c6470a22b38c1e9ec8b3dbba41b4d52
- SHA512 e999869c35369fd6f4f591e61f3529c9f768e6694597a3549e170059f6f030f5295e7e54d4eb9e9ba00c71c5b4427397a4449cf4107b71afb0926b98966f8bf5
- SSDEEP 98304:ZQiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:ZzFytO1s/ihSxJAyJh3E5uBO
- TLSH T12856CE276D555453E41DC4BAE392562153B0EF3F2581CAE72040BBB178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables referencing many IR and analysis tools
-
Suspicious use of SetThreadContext