General
- Target 2026-05-31_b1eda90b35eb04638cf1698c2618de7d_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar
- Size 646KB
- Sample260531-cf75lsaw2k
- SHA256 5eaa8e97cdbe30f4c106f06f5c8af76b93b1539f98ae1a4c5e96b97ef0e27e25
- MD5 b1eda90b35eb04638cf1698c2618de7d
- SHA1 9c18c54276dc179e83678b17a39372a1c6cdfdec
- SHA512 efa039cbfdf441f9dd5f046186f781bb1d7a415e6a20ab7bcf6db2132cc470c82de7e57d28cae26d3d89d9930ce91b6cf4c2d153f3a4252613bab763c586f631
- SSDEEP 12288:ZBWfqCHQZtvpBabWLwugwhqUzKwv8f97Bd6eJWfezrBTxfwxRFoqnL5HgmdAaNA:DlmShVzKwvS96XGf+fn1HlN
- TLSH T174E4F171B7D200F8E567867BD9425A26E7F3B41607209BEF17A053262F235CC9D39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-31_b1eda90b35eb04638cf1698c2618de7d_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_b1eda90b35eb04638cf1698c2618de7d_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_b1eda90b35eb04638cf1698c2618de7d_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar
- Size 646KB
- SHA256 5eaa8e97cdbe30f4c106f06f5c8af76b93b1539f98ae1a4c5e96b97ef0e27e25
- MD5 b1eda90b35eb04638cf1698c2618de7d
- SHA1 9c18c54276dc179e83678b17a39372a1c6cdfdec
- SHA512 efa039cbfdf441f9dd5f046186f781bb1d7a415e6a20ab7bcf6db2132cc470c82de7e57d28cae26d3d89d9930ce91b6cf4c2d153f3a4252613bab763c586f631
- SSDEEP 12288:ZBWfqCHQZtvpBabWLwugwhqUzKwv8f97Bd6eJWfezrBTxfwxRFoqnL5HgmdAaNA:DlmShVzKwvS96XGf+fn1HlN
- TLSH T174E4F171B7D200F8E567867BD9425A26E7F3B41607209BEF17A053262F235CC9D39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Stops running service(s)
-
Drops file in System32 directory