General
- Target 2026-04-15_e6d38df9a4e213cf50b9d6060ce624a3_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 4.4MB
- Sample260415-lp4cfsd14v
- SHA256 72414e0912ecaa9d7274869834df127d73219a4fd88a70ae50e46dca72665612
- MD5 e6d38df9a4e213cf50b9d6060ce624a3
- SHA1 a727a2d04e7e5be45ed8c423a11ec2523bc85b35
- SHA512 94140e9bea89da8d6cf736e2fef542b46b4022c0f7315fd9c2fc1fd393e25fc4b9d150ac2a62ce2ed33fe3a7951b708ef8627a3ab04fcb5e35bf681cbf175fd2
- SSDEEP 49152:xiw2nAQtAfoO7U+hhc/ev6kM/ev6X9iw2nAQtAfoO7U+hhc/ev6kM/ev6XOwM:LvwOh+Pt/vwOh+Pt
- TLSH T132262806669C6CB5E07251304672869D9B35BC1187238ECF22907EEDBFB66D2BD34B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_e6d38df9a4e213cf50b9d6060ce624a3_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_e6d38df9a4e213cf50b9d6060ce624a3_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_e6d38df9a4e213cf50b9d6060ce624a3_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 4.4MB
- SHA256 72414e0912ecaa9d7274869834df127d73219a4fd88a70ae50e46dca72665612
- MD5 e6d38df9a4e213cf50b9d6060ce624a3
- SHA1 a727a2d04e7e5be45ed8c423a11ec2523bc85b35
- SHA512 94140e9bea89da8d6cf736e2fef542b46b4022c0f7315fd9c2fc1fd393e25fc4b9d150ac2a62ce2ed33fe3a7951b708ef8627a3ab04fcb5e35bf681cbf175fd2
- SSDEEP 49152:xiw2nAQtAfoO7U+hhc/ev6kM/ev6X9iw2nAQtAfoO7U+hhc/ev6kM/ev6XOwM:LvwOh+Pt/vwOh+Pt
- TLSH T132262806669C6CB5E07251304672869D9B35BC1187238ECF22907EEDBFB66D2BD34B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.