General
- Target 2026-07-01_0d5c939604a037c414dd0c4973d0bea7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 168KB
- Sample260702-arnh8sat9w
- SHA256 f8accfb285cae80156d2935505f810faf2e50a92d15820c20c907183f8179417
- MD5 0d5c939604a037c414dd0c4973d0bea7
- SHA1 e6e39af21758073a21460cd2cd1d731e883c8af3
- SHA512 b9c6f4b66e6dabc494f6b85f73af07fbcea103389ba0867c7151a7ef6da9c9e24f83e5b6443be057f73ca1335c58e3c3238539999f6d97eeb23e717708523abb
- SSDEEP 3072:5QU6dd6E6IcWACzcigNglUD09dLl/+llOVBCRbzKDXnot05ok:vo4GcWVWNhWIlxoXS07
- TLSH T1FFF38D16B3E510FAD0B78278C9915706F772782607209BDF07A04776AF236E1AD3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_0d5c939604a037c414dd0c4973d0bea7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0d5c939604a037c414dd0c4973d0bea7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0d5c939604a037c414dd0c4973d0bea7_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 168KB
- SHA256 f8accfb285cae80156d2935505f810faf2e50a92d15820c20c907183f8179417
- MD5 0d5c939604a037c414dd0c4973d0bea7
- SHA1 e6e39af21758073a21460cd2cd1d731e883c8af3
- SHA512 b9c6f4b66e6dabc494f6b85f73af07fbcea103389ba0867c7151a7ef6da9c9e24f83e5b6443be057f73ca1335c58e3c3238539999f6d97eeb23e717708523abb
- SSDEEP 3072:5QU6dd6E6IcWACzcigNglUD09dLl/+llOVBCRbzKDXnot05ok:vo4GcWVWNhWIlxoXS07
- TLSH T1FFF38D16B3E510FAD0B78278C9915706F772782607209BDF07A04776AF236E1AD3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application