4e50a6ebcb9234532c71567074c83dc843e0259f844da6a4df0a65afea7809fa | Triage™

Login
Reports

Overview

overview

Static

static

2026-09-21...lc.exe

windows10-2004-x64

8

2026-09-21...lc.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-21_f0661110ecfd09fa36d19717b0502543_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 363KB
Sample260922-k5439ace49
SHA256 4e50a6ebcb9234532c71567074c83dc843e0259f844da6a4df0a65afea7809fa
MD5 f0661110ecfd09fa36d19717b0502543
SHA1 0f77b270f33bd0ced45c5ff7081cbb5229ba1127
SHA512 9b80bb6412782fdad1736e1991bcf67017d26180ed67d39945b4dad24e3176681be975a81f35b01a720ccfc2050eda1f43890249864832536bb56d103ba830bc
SSDEEP 3072:8gnQ3YB7Gie2ZesJIo5O+mO/9B9GuKtPnip7mxxMM8zomhqllcBRz1i7hLL3HmCR:VYS7mxxMM8z3hOcRUUoz7pz3IibMC
TLSH
T1AE845B4AEBA520F5E5BBC038C952651BFD717C964770A78F63904A972F23BA0AD3D700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion execution persistence spyware trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2026-09-21_f0661110ecfd09fa36d19717b0502543_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion execution persistence spyware trojan

Behavioral task

behavioral2

Sample

2026-09-21_f0661110ecfd09fa36d19717b0502543_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  2026-09-21_f0661110ecfd09fa36d19717b0502543_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 363KB
- SHA256 4e50a6ebcb9234532c71567074c83dc843e0259f844da6a4df0a65afea7809fa
- MD5 f0661110ecfd09fa36d19717b0502543
- SHA1 0f77b270f33bd0ced45c5ff7081cbb5229ba1127
- SHA512 9b80bb6412782fdad1736e1991bcf67017d26180ed67d39945b4dad24e3176681be975a81f35b01a720ccfc2050eda1f43890249864832536bb56d103ba830bc
- SSDEEP 3072:8gnQ3YB7Gie2ZesJIo5O+mO/9B9GuKtPnip7mxxMM8zomhqllcBRz1i7hLL3HmCR:VYS7mxxMM8z3hOcRUUoz7pz3IibMC
- TLSH
  T1AE845B4AEBA520F5E5BBC038C952651BFD717C964770A78F63904A972F23BA0AD3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion execution persistence spyware trojan
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Creates new service(s)
  persistence execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistencespywaretrojan

behavioral2

executionpersistence

© 2018-2026

Terms | Privacy