General
- Target 2026-10-13_ebb122a9b4e85969d97a5f755f7d2caa_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 383KB
- Sample261014-cry13se12m
- SHA256 2855e467fb69810e5a6a0a3d0f5aa3bf2c694dff355340525a815aa0c1663e29
- MD5 ebb122a9b4e85969d97a5f755f7d2caa
- SHA1 745f88b72b0a384828683cf98000f548a092efe9
- SHA512 dc53275e62c192999e2da71a93e8c82ce4d32d76ced859d887a2a8a15afe48986a519b0d12bafb4c9e32350b4e507160a47a1d0956de6ad5aa5710ad1c2fbca3
- SSDEEP 6144:Fwbtp2RqWe/WXceWoM/5DX0uM9O6JXDsBRHJeqIw:FwJMRqWe0WL/5DX0A6JzwHJec
- TLSH T19D84AE56F39904F9E1ABC238C9424516FA72BC564760A2CF33A46E963F237E05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-13_ebb122a9b4e85969d97a5f755f7d2caa_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_ebb122a9b4e85969d97a5f755f7d2caa_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_ebb122a9b4e85969d97a5f755f7d2caa_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc
- Size 383KB
- SHA256 2855e467fb69810e5a6a0a3d0f5aa3bf2c694dff355340525a815aa0c1663e29
- MD5 ebb122a9b4e85969d97a5f755f7d2caa
- SHA1 745f88b72b0a384828683cf98000f548a092efe9
- SHA512 dc53275e62c192999e2da71a93e8c82ce4d32d76ced859d887a2a8a15afe48986a519b0d12bafb4c9e32350b4e507160a47a1d0956de6ad5aa5710ad1c2fbca3
- SSDEEP 6144:Fwbtp2RqWe/WXceWoM/5DX0uM9O6JXDsBRHJeqIw:FwJMRqWe0WL/5DX0A6JzwHJec
- TLSH T19D84AE56F39904F9E1ABC238C9424516FA72BC564760A2CF33A46E963F237E05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.