General
- Target 2026-06-01_7d8d96e39f1b35b8dd657efbf3dd3d33_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 2.7MB
- Sample260601-es6tesev3k
- SHA256 876880ca450f63796fee900b95094e86444eba1645bb8dc04dd28f2408469fe9
- MD5 7d8d96e39f1b35b8dd657efbf3dd3d33
- SHA1 1547d584d47c8b8cfd2e36164246f95a180ee4df
- SHA512 5ea298fbb59ab7ee4c7e30c96052a7de1f6ccac8bce606317acff9a3c576453e68747dd4e888120e158895ed861e6cd7f581fe3e25ca00275df4ed2c2d3b6bc1
- SSDEEP 49152:/1XWR1y5iqD3m8TqBSczdypz3d6B9I1x7tLCJQOJF9A8OIQxh:9XWRYgqi8TZczWRlBtMFK8O9j
- TLSH T1E8D523A6A7B408F1EC9B967DC9424602FE72BC171760D6AF57A4C10E2F37AA09D3C711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-01_7d8d96e39f1b35b8dd657efbf3dd3d33_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_7d8d96e39f1b35b8dd657efbf3dd3d33_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 2.7MB
- SHA256 876880ca450f63796fee900b95094e86444eba1645bb8dc04dd28f2408469fe9
- MD5 7d8d96e39f1b35b8dd657efbf3dd3d33
- SHA1 1547d584d47c8b8cfd2e36164246f95a180ee4df
- SHA512 5ea298fbb59ab7ee4c7e30c96052a7de1f6ccac8bce606317acff9a3c576453e68747dd4e888120e158895ed861e6cd7f581fe3e25ca00275df4ed2c2d3b6bc1
- SSDEEP 49152:/1XWR1y5iqD3m8TqBSczdypz3d6B9I1x7tLCJQOJF9A8OIQxh:9XWRYgqi8TZczWRlBtMFK8O9j
- TLSH T1E8D523A6A7B408F1EC9B967DC9424602FE72BC171760D6AF57A4C10E2F37AA09D3C711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.