General
- Target 2026-04-26_f486a0b7f4b7f2812f59cd9f62a139f7_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar_wannacry
- Size 3.1MB
- Sample260426-m2arcaey41
- SHA256 ed04c2e572b3cb27f59455a57a1721e59cd016f1482992b7ed93f3e96155978e
- MD5 f486a0b7f4b7f2812f59cd9f62a139f7
- SHA1 23de0595ac50340638df54e2bc0a96eafab89b58
- SHA512 458eb64e15432d75ccf9fee01df255a44aaf47ca4462a7a39ea93b22d79ddddee0fd568664bf0e97e86d82ac1ec947e3f6bea78084fc0e90f0c8bf6e7e0741c7
- SSDEEP 49152:ETdT0+4gAjhewqTC5VTdT0+4gAjhewqTC5yAojT:T+4jD54+4jD5sT
- TLSH T1FDE5171437E40E32E2BB0A35997095980D377D258F259BCF26952E8DBFB26C08936773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_f486a0b7f4b7f2812f59cd9f62a139f7_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_nj.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_f486a0b7f4b7f2812f59cd9f62a139f7_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_nj.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_f486a0b7f4b7f2812f59cd9f62a139f7_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar_wannacry
- Size 3.1MB
- SHA256 ed04c2e572b3cb27f59455a57a1721e59cd016f1482992b7ed93f3e96155978e
- MD5 f486a0b7f4b7f2812f59cd9f62a139f7
- SHA1 23de0595ac50340638df54e2bc0a96eafab89b58
- SHA512 458eb64e15432d75ccf9fee01df255a44aaf47ca4462a7a39ea93b22d79ddddee0fd568664bf0e97e86d82ac1ec947e3f6bea78084fc0e90f0c8bf6e7e0741c7
- SSDEEP 49152:ETdT0+4gAjhewqTC5VTdT0+4gAjhewqTC5yAojT:T+4jD54+4jD5sT
- TLSH T1FDE5171437E40E32E2BB0A35997095980D377D258F259BCF26952E8DBFB26C08936773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.