Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 00:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_51f5cce67062de4caded073773f5c5d7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_51f5cce67062de4caded073773f5c5d7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-06-01_51f5cce67062de4caded073773f5c5d7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 788KB
- Sample260601-bb275ac13r
- SHA256 e9f2788962a94b9d6324bd3367be252de39f5d32dad2c8ac49ec68155674b145
- MD5 51f5cce67062de4caded073773f5c5d7
- SHA1 fdb627c2a8c0ac757ee566441a1458b757245fce
- SHA512 a56df4973f298c8a223c8fed1dfc2d2419caf978a76439c5e651bc2fb54aabd0290e220c9b2a2d0a2b54c34d82148a48b4cc5e928f68214c9b7d05d50c70ffd5
- SSDEEP 12288:EEh09zkDpj0JFMoGfKxguIjyaCJAOvElgxcKPdmkuM7noVolm:fDDpjQMlKl8lgeMdmM7n2
- TLSH T1D005BE44B6B941F9D073A138D916B607EA763C0907209BDB23E44A6D2F637E07B7B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4028 2026-06-01_51f5cce67062de4caded073773f5c5d7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 4028 2026-06-01_51f5cce67062de4caded073773f5c5d7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-01_51f5cce67062de4caded073773f5c5d7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-01_51f5cce67062de4caded073773f5c5d7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\mem_init.log
- Size 382B
- SHA256 97bd5a777025a8c99332546947346065c5ea363aa99f646f8739c4d2f569052a
- MD5 0373b9160dbd986210d038100ab9431f
- SHA1 24dd41ae8c8df63f5face12f369810aba5ab432c
- SHA512 c5746f5541e7513c1658114ea5194eecece09d4e81f9e1280c68ce591c252ab28f65d31f5994f1c1e0509538cbc45eb9021f9fe39db35b801c1c1e86461eaa55
- TLSH T1F3E022EA5018087200BE33972390889BE79DA89E2FBB282030EDE3F42D0454A93E1180
- MD5 SHA1 SHA512 TLSH