General
- Target 2026-10-22_0bc1f5e5b1d81410e898f96a37da99fb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 3.1MB
- Sample261024-11a8daxtes
- SHA256 f221c6537af227b9480f8b44da91b5844078bf418529e042fa93fd7143a6a422
- MD5 0bc1f5e5b1d81410e898f96a37da99fb
- SHA1 aad348045c346cbfd49aca41e9e2d790f10d6e40
- SHA512 5d63a3e52923b6b2532459e9e31822647dd9d056919a95a6abd7914fd840dbefbef3df5558f262cd64eb2ab2bb58d73b8a20c58ebea297c130c21ea7271ffc61
- SSDEEP 49152:FdnCcApLMNneogeMLDcfwP6U/0YwIfS0Zn+wECp6DvqrZ3g3PnPRlW:FF2LMSzV6DkNg
- TLSH T186E59E4AA3B900EDD067C17CCE474613EB72B81513359AFB56A18D662F23BF1663E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_0bc1f5e5b1d81410e898f96a37da99fb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_0bc1f5e5b1d81410e898f96a37da99fb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_0bc1f5e5b1d81410e898f96a37da99fb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 3.1MB
- SHA256 f221c6537af227b9480f8b44da91b5844078bf418529e042fa93fd7143a6a422
- MD5 0bc1f5e5b1d81410e898f96a37da99fb
- SHA1 aad348045c346cbfd49aca41e9e2d790f10d6e40
- SHA512 5d63a3e52923b6b2532459e9e31822647dd9d056919a95a6abd7914fd840dbefbef3df5558f262cd64eb2ab2bb58d73b8a20c58ebea297c130c21ea7271ffc61
- SSDEEP 49152:FdnCcApLMNneogeMLDcfwP6U/0YwIfS0Zn+wECp6DvqrZ3g3PnPRlW:FF2LMSzV6DkNg
- TLSH T186E59E4AA3B900EDD067C17CCE474613EB72B81513359AFB56A18D662F23BF1663E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE