General
- Target 2026-06-28_a65bbf80a7025b57c2ed847adda3390d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.4MB
- Sample260628-ys6m7sc181
- SHA256 258ad247416f2580cf189cdd263ac635f0a9aea2b77994cb3520519484950454
- MD5 a65bbf80a7025b57c2ed847adda3390d
- SHA1 7bb5c116b0e06edfbb34c23ab4343b88cafe5536
- SHA512 5a2f5a4176e102a83b5b5e424e8cc618316b0473da34dbae7dc7365f4788abb29413dba4366d78e22693c8697a28ebf6e0e7cc901e9fd6f028a09801d7fe8de9
- SSDEEP 49152:H/fwaui3vd0RL8sH4pxV3+47tHzTpar+eImrx0+6qvELcDqTGbcFYU:H/f0T2zI6gELVl
- TLSH T1D8C57C5762E801D5E1F6D13C8A67840BE6723C160735A6DF12B06A5E2F37BE09EBE710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-28_a65bbf80a7025b57c2ed847adda3390d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_a65bbf80a7025b57c2ed847adda3390d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_a65bbf80a7025b57c2ed847adda3390d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 2.4MB
- SHA256 258ad247416f2580cf189cdd263ac635f0a9aea2b77994cb3520519484950454
- MD5 a65bbf80a7025b57c2ed847adda3390d
- SHA1 7bb5c116b0e06edfbb34c23ab4343b88cafe5536
- SHA512 5a2f5a4176e102a83b5b5e424e8cc618316b0473da34dbae7dc7365f4788abb29413dba4366d78e22693c8697a28ebf6e0e7cc901e9fd6f028a09801d7fe8de9
- SSDEEP 49152:H/fwaui3vd0RL8sH4pxV3+47tHzTpar+eImrx0+6qvELcDqTGbcFYU:H/f0T2zI6gELVl
- TLSH T1D8C57C5762E801D5E1F6D13C8A67840BE6723C160735A6DF12B06A5E2F37BE09EBE710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.