General
- Target 2026-10-26_67152c8eb0b53f6de7ef28acbb6a401f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 765KB
- Sample261027-sy9ddsd18s
- SHA256 6d01c85d6434dd88fabdedd40cbed50fc38c2e15b994bf903cdbbeecbea39737
- MD5 67152c8eb0b53f6de7ef28acbb6a401f
- SHA1 fd7d2ab68c4985473a0d0fb099fd14c0491b5e24
- SHA512 9d6b943043bb0b8f9c6c756a2b32b86643ae0e260cdb7c53d66a75566a9bc4a4aa1a0d2ecfd1dcc79b50ca7ebca58cfc5e552d35ba0bb989205ab14c66d2fcc0
- SSDEEP 12288:BvgL4Om0Bd2i6+wkMOaCI5s6CfY+mDEyK3mer8j2VyxBlDetAqxSvRJ:BILpD2rLk9a9hOyb
- TLSH T165F48D5AE3A502F8D4BBC274CE524543EB7278555330A6AF03E15A791F33EA06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-26_67152c8eb0b53f6de7ef28acbb6a401f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_67152c8eb0b53f6de7ef28acbb6a401f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
james1
C2
-
http://87.120.104.81/d19ca32cb5a444ac8b87.php
Attributes
-
url_path
/d19ca32cb5a444ac8b87.php
rc4.traffic_key
rc4.plain
Targets
-
- Target 2026-10-26_67152c8eb0b53f6de7ef28acbb6a401f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 765KB
- SHA256 6d01c85d6434dd88fabdedd40cbed50fc38c2e15b994bf903cdbbeecbea39737
- MD5 67152c8eb0b53f6de7ef28acbb6a401f
- SHA1 fd7d2ab68c4985473a0d0fb099fd14c0491b5e24
- SHA512 9d6b943043bb0b8f9c6c756a2b32b86643ae0e260cdb7c53d66a75566a9bc4a4aa1a0d2ecfd1dcc79b50ca7ebca58cfc5e552d35ba0bb989205ab14c66d2fcc0
- SSDEEP 12288:BvgL4Om0Bd2i6+wkMOaCI5s6CfY+mDEyK3mer8j2VyxBlDetAqxSvRJ:BILpD2rLk9a9hOyb
- TLSH T165F48D5AE3A502F8D4BBC274CE524543EB7278555330A6AF03E15A791F33EA06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10