General
- Target 2026-09-09_e867c1b0b23fe35365181f5f346fb734_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- Sample260910-159azayyav
- SHA256 4f7f48312c9eb37ec478e688c0cdb86b8f77cae19a287f02a5e4dca1af2a165c
- MD5 e867c1b0b23fe35365181f5f346fb734
- SHA1 0f13c41b8fc087c68735f6489ebf358ac546921e
- SHA512 525a4a86237fef0209221a20bec378b6b195f605428177f2784b34061494f3d2b7733f8b3ee8ea962ddc7f332c64e0a11b9578987c7481c89415f098f84e06ca
- SSDEEP 49152:G+XFr1XxKxQMIGN1sm9nt4gKJZAg1BXVo/cRAdaCYUNCTpiLygLNiXicJFFRGNzb:L/M3KPFo8tu97wRGpj3
- TLSH T164167B17E2B941E4C0BBD13D8A979657FEB2784A877197CB4390861A5F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_e867c1b0b23fe35365181f5f346fb734_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_e867c1b0b23fe35365181f5f346fb734_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 4.0MB
- SHA256 4f7f48312c9eb37ec478e688c0cdb86b8f77cae19a287f02a5e4dca1af2a165c
- MD5 e867c1b0b23fe35365181f5f346fb734
- SHA1 0f13c41b8fc087c68735f6489ebf358ac546921e
- SHA512 525a4a86237fef0209221a20bec378b6b195f605428177f2784b34061494f3d2b7733f8b3ee8ea962ddc7f332c64e0a11b9578987c7481c89415f098f84e06ca
- SSDEEP 49152:G+XFr1XxKxQMIGN1sm9nt4gKJZAg1BXVo/cRAdaCYUNCTpiLygLNiXicJFFRGNzb:L/M3KPFo8tu97wRGpj3
- TLSH T164167B17E2B941E4C0BBD13D8A979657FEB2784A877197CB4390861A5F237E09E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stealc stealer Version 3
-
Executes dropped EXE
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1