General
- Target 2026-04-17_c7984e6f96b6d00f2d86ba8b02a8c83c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 590KB
- Sample260417-e2jegsat9t
- SHA256 b86799f3621aa63fbbb6e486d6352c7cc33ff10356e4aac40e3197774f61adcc
- MD5 c7984e6f96b6d00f2d86ba8b02a8c83c
- SHA1 98ea78e64da213705241f53120b7cf367c70a762
- SHA512 2c0824e4fb8ac7035649d4ec9cf391a8ee9529e5a5437a302405194348f14b769253fb68eb64ef546001ec31f2963488ca72e1def336f0a96b4980625e1223f7
- SSDEEP 12288:eoTKuGyBSopZ1e3bgm5cEzciY0vvMD8m8DZ0nol+c:eoTKpopZ1e3bZ5Bcivv9r10C
- TLSH T1E1D45B36639800EDE0B791388E076953FA76740603718AFF03D156A62E5FAF46F3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-04-17_c7984e6f96b6d00f2d86ba8b02a8c83c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_c7984e6f96b6d00f2d86ba8b02a8c83c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_c7984e6f96b6d00f2d86ba8b02a8c83c_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 590KB
- SHA256 b86799f3621aa63fbbb6e486d6352c7cc33ff10356e4aac40e3197774f61adcc
- MD5 c7984e6f96b6d00f2d86ba8b02a8c83c
- SHA1 98ea78e64da213705241f53120b7cf367c70a762
- SHA512 2c0824e4fb8ac7035649d4ec9cf391a8ee9529e5a5437a302405194348f14b769253fb68eb64ef546001ec31f2963488ca72e1def336f0a96b4980625e1223f7
- SSDEEP 12288:eoTKuGyBSopZ1e3bgm5cEzciY0vvMD8m8DZ0nol+c:eoTKpopZ1e3bZ5Bcivv9r10C
- TLSH T1E1D45B36639800EDE0B791388E076953FA76740603718AFF03D156A62E5FAF46F3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.