General
- Target 2026-07-01_fd550e3bee203b0baa26242e46d8993d_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 2.1MB
- Sample260701-pwty5set4r
- SHA256 3172b03b403f3436de8a7dafd7ebea9a6739464dc8360104b9f1cb34cdd5789e
- MD5 fd550e3bee203b0baa26242e46d8993d
- SHA1 e5c231b89eef6772850b0cdf134d13682952d81e
- SHA512 1cd2d87d56cea8225e714b4884eefe0871d8af73584fa1ef136766702b44c84aaa13fac32f8971f61edc0b22ea0253b5fa886a181ae60f9069b4665e415d4d0f
- SSDEEP 24576:bBDIiukOiFOPfepJ12eCtsO8e7zYwd4KplkT9ZZhq1clqfh1rl5jcAkSYqyEqUH:bhgA2eQJbXpg9TIsS1HpYqK4
- TLSH T199A54916B7E842B5F0B38234C9A29656EA72BC511B30C7CF1294A27D5F33BD19D35B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_fd550e3bee203b0baa26242e46d8993d_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_fd550e3bee203b0baa26242e46d8993d_amadey_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 2.1MB
- SHA256 3172b03b403f3436de8a7dafd7ebea9a6739464dc8360104b9f1cb34cdd5789e
- MD5 fd550e3bee203b0baa26242e46d8993d
- SHA1 e5c231b89eef6772850b0cdf134d13682952d81e
- SHA512 1cd2d87d56cea8225e714b4884eefe0871d8af73584fa1ef136766702b44c84aaa13fac32f8971f61edc0b22ea0253b5fa886a181ae60f9069b4665e415d4d0f
- SSDEEP 24576:bBDIiukOiFOPfepJ12eCtsO8e7zYwd4KplkT9ZZhq1clqfh1rl5jcAkSYqyEqUH:bhgA2eQJbXpg9TIsS1HpYqK4
- TLSH T199A54916B7E842B5F0B38234C9A29656EA72BC511B30C7CF1294A27D5F33BD19D35B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.