General
- Target 2026-06-27_a537be75ee60e60aebd025646e1230f1_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 7.2MB
- Sample260629-ex212ad18l
- SHA256 1e184b2e16b419ffa45709b1f7f32e9a9b81c906e9571fddff6cd46e80e336a6
- MD5 a537be75ee60e60aebd025646e1230f1
- SHA1 3daff9f3fdd3193600ba1ff3c5aaf2ed6b43db4e
- SHA512 d4c3777aca5def0c5238df0529b81e73cfd23b4de8b8e9066fd087b12d91df668dd1e5a7f9278fedbb233654c87cd1b0088bfb443042b72a72c236687c1ba6aa
- SSDEEP 49152:VfG5iHCAgcWRF1pJFt36mWYMZkK+qcSXlxVgP8N7BiUaRC5HKMeZxWHwPj+/:ggijFTzFcqmbxaQBkU5leZxzi
- TLSH T15476239873E018F5ED66923AD442C916E3B1BC224724E7CB0364C2776F33AA59D3B746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_a537be75ee60e60aebd025646e1230f1_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a537be75ee60e60aebd025646e1230f1_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a537be75ee60e60aebd025646e1230f1_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 7.2MB
- SHA256 1e184b2e16b419ffa45709b1f7f32e9a9b81c906e9571fddff6cd46e80e336a6
- MD5 a537be75ee60e60aebd025646e1230f1
- SHA1 3daff9f3fdd3193600ba1ff3c5aaf2ed6b43db4e
- SHA512 d4c3777aca5def0c5238df0529b81e73cfd23b4de8b8e9066fd087b12d91df668dd1e5a7f9278fedbb233654c87cd1b0088bfb443042b72a72c236687c1ba6aa
- SSDEEP 49152:VfG5iHCAgcWRF1pJFt36mWYMZkK+qcSXlxVgP8N7BiUaRC5HKMeZxWHwPj+/:ggijFTzFcqmbxaQBkU5leZxzi
- TLSH T15476239873E018F5ED66923AD442C916E3B1BC224724E7CB0364C2776F33AA59D3B746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.