General
- Target 2026-04-17_e0bae6f75a2738fdfd0afaf14c77385c_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry
- Size 4.0MB
- Sample260417-ft79baaz7s
- SHA256 833c160c5adc4ef2e8238c79fa4b96a65d5017c2049140ea8d8eeda2ce8adede
- MD5 e0bae6f75a2738fdfd0afaf14c77385c
- SHA1 557cd8d5b7caef2f0808ab2bb247bce1fb8ddc9a
- SHA512 165260e1114bfc2af76aefd6cc90812e6f660dbae9ce3cde0b4c2f5ea747eda039238d1a70d83fe9afe43f39c8e40a80896b8426076fa956977374a2c4220286
- SSDEEP 98304:LSERbqSERbwp7o5rSERbqSERbwp7o5Ltaq:fo5/o5Ltaq
- TLSH T1C6166C117BD14032E2736934897AD2696D7D78208B329BCF13845EBD6FB05D0AA3973B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_e0bae6f75a2738fdfd0afaf14c77385c_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_e0bae6f75a2738fdfd0afaf14c77385c_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_e0bae6f75a2738fdfd0afaf14c77385c_cobalt-strike_icedid_luca-stealer_njrat_remcos_satacom_stop_vidar_wannacry
- Size 4.0MB
- SHA256 833c160c5adc4ef2e8238c79fa4b96a65d5017c2049140ea8d8eeda2ce8adede
- MD5 e0bae6f75a2738fdfd0afaf14c77385c
- SHA1 557cd8d5b7caef2f0808ab2bb247bce1fb8ddc9a
- SHA512 165260e1114bfc2af76aefd6cc90812e6f660dbae9ce3cde0b4c2f5ea747eda039238d1a70d83fe9afe43f39c8e40a80896b8426076fa956977374a2c4220286
- SSDEEP 98304:LSERbqSERbwp7o5rSERbqSERbwp7o5Ltaq:fo5/o5Ltaq
- TLSH T1C6166C117BD14032E2736934897AD2696D7D78208B329BCF13845EBD6FB05D0AA3973B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.