General
- Target 2026-08-17_38f1a3f9b9b717224abcd50f7f84ccf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 779KB
- Sample260817-qq5n5asvbz
- SHA256 dab4eb1d3df5e879c69c85bc3275f5ade82acb6b334d5d27def2a39ab78d67e3
- MD5 38f1a3f9b9b717224abcd50f7f84ccf0
- SHA1 a6e211fa075e2c9e1b2f10281c3f16905b24df68
- SHA512 86c2fb25a06029be7c9dfb55b1435b1f0fedb78459ce6d2449e6daee5c3a9e823914b6b9e5daa5c81c8f50b71a82b3919f95af7c05250b98756a8892c4c65dd9
- SSDEEP 12288:USsWMJ9vjqeUEzECXFbdqR+hSRddg3OyxBlDetAqxSv:grX3EYd++ALdgeyb
- TLSH T182058D1AF3A902E8D1BBC178C9424552FB72B85653309ADF03D15A661F377E06F3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_38f1a3f9b9b717224abcd50f7f84ccf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_38f1a3f9b9b717224abcd50f7f84ccf0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 779KB
- SHA256 dab4eb1d3df5e879c69c85bc3275f5ade82acb6b334d5d27def2a39ab78d67e3
- MD5 38f1a3f9b9b717224abcd50f7f84ccf0
- SHA1 a6e211fa075e2c9e1b2f10281c3f16905b24df68
- SHA512 86c2fb25a06029be7c9dfb55b1435b1f0fedb78459ce6d2449e6daee5c3a9e823914b6b9e5daa5c81c8f50b71a82b3919f95af7c05250b98756a8892c4c65dd9
- SSDEEP 12288:USsWMJ9vjqeUEzECXFbdqR+hSRddg3OyxBlDetAqxSv:grX3EYd++ALdgeyb
- TLSH T182058D1AF3A902E8D1BBC178C9424552FB72B85653309ADF03D15A661F377E06F3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.