General
- Target 2026-10-28_6824632b85fe29f3e3d4db9f43b9487c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.2MB
- Sample261030-deb68aas2j
- SHA256 4bcfa4f58ceca9513dd69f7681bc7a0692e470ada1884ddb0f4ce89fba2bfeff
- MD5 6824632b85fe29f3e3d4db9f43b9487c
- SHA1 fa1f1e76a4ebcac66903171ae8bc9b32b1001d06
- SHA512 e6e38870be4ec8c5e312f71c37f17b50260a648c67e17ceffc35d8cab3d533d2eebc31b04ac7ad4e738505d180b5d8b730b82eeefd2b4feb82c7f54b43c76478
- SSDEEP 98304:AQiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:AzFytO1s/ihSxJAyJh3E5uBO
- TLSH T13F56CE276D555453E41DC4BAE392562153B0EF3F2581CAE72040BBB178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-28_6824632b85fe29f3e3d4db9f43b9487c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_6824632b85fe29f3e3d4db9f43b9487c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_6824632b85fe29f3e3d4db9f43b9487c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.2MB
- SHA256 4bcfa4f58ceca9513dd69f7681bc7a0692e470ada1884ddb0f4ce89fba2bfeff
- MD5 6824632b85fe29f3e3d4db9f43b9487c
- SHA1 fa1f1e76a4ebcac66903171ae8bc9b32b1001d06
- SHA512 e6e38870be4ec8c5e312f71c37f17b50260a648c67e17ceffc35d8cab3d533d2eebc31b04ac7ad4e738505d180b5d8b730b82eeefd2b4feb82c7f54b43c76478
- SSDEEP 98304:AQiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:AzFytO1s/ihSxJAyJh3E5uBO
- TLSH T13F56CE276D555453E41DC4BAE392562153B0EF3F2581CAE72040BBB178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables referencing many IR and analysis tools
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext