General
- Target 2026-04-16_ed5d88fa18c255f439ad9ed6b3f9e898_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry
- Size 4.5MB
- Sample260416-hbvavagy6q
- SHA256 d26731b1f512db216515f0dea80105336816fc5b117906fbb983fc773f9ade9d
- MD5 ed5d88fa18c255f439ad9ed6b3f9e898
- SHA1 47c1e7c5e366460c3a0167daebc084a42fa3d0dd
- SHA512 85334a21a70d9d996f404621956f12d53fdea3adc700bbb301ef57c239fa42050a23c360de714e9373fc4c7d59e03633956dfa84519e8f25b489d71e950bf4e1
- SSDEEP 98304:LSERbqSERbwp7o5mtnSERbqSERbwp7o5mtQT:fo5mtbo5mtQT
- TLSH T13A2629117A914031E17369348976926D6A797820CB238ECF23846EFDFFF15D0AA39736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_ed5d88fa18c255f439ad9ed6b3f9e898_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_ed5d88fa18c255f439ad9ed6b3f9e898_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_ed5d88fa18c255f439ad9ed6b3f9e898_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry
- Size 4.5MB
- SHA256 d26731b1f512db216515f0dea80105336816fc5b117906fbb983fc773f9ade9d
- MD5 ed5d88fa18c255f439ad9ed6b3f9e898
- SHA1 47c1e7c5e366460c3a0167daebc084a42fa3d0dd
- SHA512 85334a21a70d9d996f404621956f12d53fdea3adc700bbb301ef57c239fa42050a23c360de714e9373fc4c7d59e03633956dfa84519e8f25b489d71e950bf4e1
- SSDEEP 98304:LSERbqSERbwp7o5mtnSERbqSERbwp7o5mtQT:fo5mtbo5mtQT
- TLSH T13A2629117A914031E17369348976926D6A797820CB238ECF23846EFDFFF15D0AA39736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.