General
- Target 2026-09-12_699b1a611e40b93bde74433c08e05a9a_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- Sample260913-afcbtshp2w
- SHA256 8b70a5477fd362d9bb478fecb911a02dec1f49de21c3b7b24e70cc8643e959b3
- MD5 699b1a611e40b93bde74433c08e05a9a
- SHA1 8b242c9892d3cf5ae6f872371c3d50eb503a49ef
- SHA512 c65993951066a818f74203f31d770540449e601921c272a346fba7c39afa07b4b5e8ed906c1372f6fb9d2195cd13d12c1325d1d06d2a6f4dc9eee0229609302d
- SSDEEP 6144:qynDUuQsII/WOtbuHRS6aiETssOGIFXDsBRHJeq0/:RD/QsIIvUxPaiETsssFzwHJeJ
- TLSH T11984AE16F3E904F9E1AB823889424516FA72BC564760A6CF33A46F963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-12_699b1a611e40b93bde74433c08e05a9a_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_699b1a611e40b93bde74433c08e05a9a_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_699b1a611e40b93bde74433c08e05a9a_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 381KB
- SHA256 8b70a5477fd362d9bb478fecb911a02dec1f49de21c3b7b24e70cc8643e959b3
- MD5 699b1a611e40b93bde74433c08e05a9a
- SHA1 8b242c9892d3cf5ae6f872371c3d50eb503a49ef
- SHA512 c65993951066a818f74203f31d770540449e601921c272a346fba7c39afa07b4b5e8ed906c1372f6fb9d2195cd13d12c1325d1d06d2a6f4dc9eee0229609302d
- SSDEEP 6144:qynDUuQsII/WOtbuHRS6aiETssOGIFXDsBRHJeq0/:RD/QsIIvUxPaiETsssFzwHJeJ
- TLSH T11984AE16F3E904F9E1AB823889424516FA72BC564760A6CF33A46F963F237D05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.