Analysis
- max time kernel
149s - max time network
93s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 01:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 793KB
- Sample260601-bfa97sax6v
- SHA256 a238bc5891826f1993c3cf7b71aba0d4626eccbf3d1aa999102cbf8004f8b52f
- MD5 61862976830f2ff2389136b95445e026
- SHA1 c79fb5a0d71e766a625cbdcc06e6d3adef6adc9e
- SHA512 c8b04c10ba1b5a5a49a442b2ffe0ccb194480ddf39c3dd7e0fb1350c467daf5e247eff97f272af2f72944948678597cd1062dbaca13bbb14d43c8276b6edba42
- SSDEEP 12288:c0klid50LjzpqXuGcC2AwfyLtGhJiwsLDiLqIC5uquSS7nDuoACc:3x0LjAXgCmEw0DiWDuqo7na
- TLSH T11E05BE45B6BD41FDC077A138D956B607EA763809072096DF23E44A6D2F637E07A3B322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4336 2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe 4336 2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4336
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\mem_init.log
- Size 382B
- SHA256 5c443869d09f0dc5593b86634abf71e0ff36b95369abdd9a77fa3a30ee284db7
- MD5 979da93fcb2fe640010daec686cd10b7
- SHA1 a4ca068bcc6e4803f4e59368e0e917ce34462fe1
- SHA512 b07e2c53b46017af2e0c2f47a3a3cb1c68ffd62d19074c95464f9e6f84217837b0b6d899851351aa7a572f5dd5a380b57626d70cc09692c3eef899699af2c044
- TLSH T11DE02BAA5018087400FE739762908857E79D9C9E2FFA293030EED7F52D0454553F1540
- MD5 SHA1 SHA512 TLSH