General
- Target 2026-09-29_f883e166d52e6fc9e740431264ec1977_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.8MB
- Sample260929-qsgp3shd49
- SHA256 6ed09f11a17f6a374c5da2626357cae8671998c02d1a548806af21718bfd1e14
- MD5 f883e166d52e6fc9e740431264ec1977
- SHA1 2a8b7123f2282bc8080beb559292c7a7e8bd18b4
- SHA512 ac12becb4d12bb30fc9cb65e702f10a9d7ddc637eae139c224db0e90dc61a7d4bc64a4b84e8e065cb911439e982b7148d7addaeaed1078b7cbefe619ec8740ed
- SSDEEP 393216:75JCHYKiW/aa8Cn74lmRxamvq/IFro3icVDHUl5qEjj:75JC4KiW/aa8Cn74lmRxamvq/Ixo3fVG
- TLSH T147D67E2672EC0198F1B3C1BCCAEB9A07D532784A4731DADB1690455E0F67FD8467AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-29_f883e166d52e6fc9e740431264ec1977_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_f883e166d52e6fc9e740431264ec1977_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_f883e166d52e6fc9e740431264ec1977_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 12.8MB
- SHA256 6ed09f11a17f6a374c5da2626357cae8671998c02d1a548806af21718bfd1e14
- MD5 f883e166d52e6fc9e740431264ec1977
- SHA1 2a8b7123f2282bc8080beb559292c7a7e8bd18b4
- SHA512 ac12becb4d12bb30fc9cb65e702f10a9d7ddc637eae139c224db0e90dc61a7d4bc64a4b84e8e065cb911439e982b7148d7addaeaed1078b7cbefe619ec8740ed
- SSDEEP 393216:75JCHYKiW/aa8Cn74lmRxamvq/IFro3icVDHUl5qEjj:75JC4KiW/aa8Cn74lmRxamvq/Ixo3fVG
- TLSH T147D67E2672EC0198F1B3C1BCCAEB9A07D532784A4731DADB1690455E0F67FD8467AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Windows security bypass
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.